CVE-2013-7424

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
gnuglibc
𝑥
≤ 2.14.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
glibc
bullseye
2.31-13+deb11u11
fixed
bullseye (security)
2.31-13+deb11u10
fixed
bookworm
2.36-9+deb12u8
fixed
bookworm (security)
2.36-9+deb12u7
fixed
sid
2.40-3
fixed
trixie
2.40-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
eglibc
utopic
dne
trusty
not-affected
precise
not-affected
lucid
not-affected
glibc
utopic
not-affected
trusty
dne
precise
dne
lucid
dne
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2015-1627.html
http://www.openwall.com/lists/oss-security/2015/01/29/21
http://www.securityfocus.com/bid/72710
https://bugzilla.redhat.com/show_bug.cgi?id=1186614
https://bugzilla.redhat.com/show_bug.cgi?id=981942
https://sourceware.org/bugzilla/show_bug.cgi?id=18011
https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2e96f1c7
http://rhn.redhat.com/errata/RHSA-2015-1627.html
http://www.openwall.com/lists/oss-security/2015/01/29/21
http://www.securityfocus.com/bid/72710
https://bugzilla.redhat.com/show_bug.cgi?id=1186614
https://bugzilla.redhat.com/show_bug.cgi?id=981942
https://sourceware.org/bugzilla/show_bug.cgi?id=18011
https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2e96f1c7