Red Hat
Red Hat Security Releases - September 2023
red-hat-2023-09 Sep 1, 2023 Source: Vendor
Red Hat security advisories for September 2023, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2023-4527
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2023-4527
BR2023-0000-031331
Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6
unclaimed
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larg...
Credited as Florian Weimer (Red Hat)
CVE-2023-4806
BR2023-0000-031336
Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9
unclaimed
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitabl...
Credited as Siddhesh Poyarekar (Red Hat)
CVE-2023-5156
BR2023-0000-031341
Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
unclaimed
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
Credited as Red Hat would like to thank Romain Geissler for reporting this issue
CVE-2023-29499
BR2023-0000-031448
Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
unclaimed
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Credited as Upstream acknowledges William Manley as the original reporter
CVE-2023-32611
BR2023-0000-031750
Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
unclaimed
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Credited as Upstream acknowledges William Manley as the original reporter
CVE-2023-32665
BR2023-0000-031751
Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
unclaimed
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Credited as Upstream acknowledges William Manley as the original reporter