CVE-2018-19591
In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation o
CVSS
7.5
High
EPSS
5.5%
p93
KEV
—
Exploit Today
28
0-100
Published: Dec 4, 2018 · Last modified: Oct 14, 2026 · CWE-20 · CWE-404
5.5%EPSS · 30 days5.5%
2026-10-062026-11-02
In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
- www.securityfocus.comhttp://www.securityfocus.com/bid/106037
- www.securitytracker.comhttp://www.securitytracker.com/id/1042174
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO7WHN52GFMC5F2I2232GFIPSSXWFV7G/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52KE4YR3GNMHQUOS3DKAGZD5TQ5D5UH/
- security.gentoo.orghttps://security.gentoo.org/glsa/201903-09
- security.gentoo.orghttps://security.gentoo.org/glsa/201908-06
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20190321-0003/
- sourceware.orghttps://sourceware.org/bugzilla/show_bug.cgi?id=23927
- sourceware.orghttps://sourceware.org/git/?p=glibc.git%3Ba=blob_plain%3Bf=NEWS%3Bhb=HEAD
- sourceware.orghttps://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=d527c860f5a3f0ed687bd03f0cb464612dc23408
- usn.ubuntu.comhttps://usn.ubuntu.com/4416-1/
- www.securityfocus.comhttp://www.securityfocus.com/bid/106037
- www.securitytracker.comhttp://www.securitytracker.com/id/1042174
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO7WHN52GFMC5F2I2232GFIPSSXWFV7G/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52KE4YR3GNMHQUOS3DKAGZD5TQ5D5UH/
- security.gentoo.orghttps://security.gentoo.org/glsa/201903-09
- security.gentoo.orghttps://security.gentoo.org/glsa/201908-06
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20190321-0003/
- sourceware.orghttps://sourceware.org/bugzilla/show_bug.cgi?id=23927
- sourceware.orghttps://sourceware.org/git/?p=glibc.git%3Ba=blob_plain%3Bf=NEWS%3Bhb=HEAD
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-794057.5 HIG—
———In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.7hCVE-2026-1166546.5 MED—
———Tanium addressed an improper input validation vulnerability in Threat Response.12hCVE-2026-1166534.3 MED—
———Tanium addressed an improper input validation vulnerability in Threat Response.12hCVE-2026-121242——
———Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)14hCVE-2026-121240——
———Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)14hCVE-2026-121236——
———Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)14h