← CVE Intelligence

CVE-2026-0915

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler PUBLISHED

Description (CNA)

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

Affected (CNA)

Vendor / productVersions
The GNU C Library / glibcaffected 2.0 through 2.42

CWE

CWE-908

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.