← Database

CVE-2026-4438

MEDIUM CVSS: 5.4 Published: 2026-03-20 Modified: 2026-07-14

Description

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Affected Platforms

Gnu Glibc

Weakness Type

CWE-20, CWE-88

References