CVE-2023-5156

Description

A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.

CVSS breakdown

Affected products

• gnu / glibc2.34 – 2.39
• RedHat / enterprise_linux8.0 – 8.0
• RedHat / enterprise_linux9.0 – 9.0

References

• VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-5156
• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2240541
• MISChttps://sourceware.org/bugzilla/show_bug.cgi?id=30884
• MISChttps://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796