Maple Labs

CVE search · CVE-2026-4438

CVE-2026-4438

medium 5.4

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
3ff69d7a-14f2-4f67-a097-88dee7810d18
Weakness
CWE-20, CWE-88

Severity

VersionScoreVectorSource
CVSS 3.1 medium 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References