1
PublicDateAtUSN: 2013-09-20
2
Candidate: CVE-2013-4357
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4357
6
http://www.openwall.com/lists/oss-security/2013/09/14/2
7
https://usn.ubuntu.com/usn/usn-2306-1
9
getaddrinfo() stack overflow
12
jdstrand> upstream says this isn't an issue and reporter states that this
13
can't be reproduced on Linux. Marking ignored for now.
14
sbeattie> RedHat issued a fix for this in RHBA-2012-0763
16
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4357
17
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742925
18
http://sourceware.org/bugzilla/show_bug.cgi?id=12671
20
Discovered-by: Maksymilian Arciemowicz
24
upstream: https://sourceware.org/git/?p=glibc.git;h=f2962a71959fd254a7a223437ca4b63b9e81130c
25
upstream: https://sourceware.org/git/?p=glibc.git;h=34a9094f49241ebb72084c536cf468fd51ebe3ec
26
upstream_eglibc: released (2.14)
27
lucid_eglibc: released (2.11.1-0ubuntu7.14)
28
precise_eglibc: not-affected (2.15-0ubuntu10)
29
quantal_eglibc: not-affected (2.15-0ubuntu10)
30
raring_eglibc: not-affected (2.15-0ubuntu10)
31
saucy_eglibc: not-affected (2.15-0ubuntu10)
32
trusty_eglibc: not-affected (2.15-0ubuntu10)
33
devel_eglibc: not-affected (2.15-0ubuntu10)