CVE-2023-5156

Summary

A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.

Affected Software

Weaknesses

• CWE-401: Missing Release of Memory after Effective Lifetime

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2023/10/03/4
• http://www.openwall.com/lists/oss-security/2023/10/03/5
• http://www.openwall.com/lists/oss-security/2023/10/03/6
• http://www.openwall.com/lists/oss-security/2023/10/03/8
• https://access.redhat.com/security/cve/CVE-2023-5156
• https://bugzilla.redhat.com/show_bug.cgi?id=2240541
• https://security.gentoo.org/glsa/202402-01
• https://sourceware.org/bugzilla/show_bug.cgi?id=30884
• https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2023-5156
• https://bugzilla.redhat.com/show_bug.cgi?id=2240541
• https://sourceware.org/bugzilla/show_bug.cgi?id=30884
• https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796

• ←Previous
• Next→