← CVE Intelligence

CVE-2026-4438

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames PUBLISHED

Description (CNA)

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Affected (CNA)

Vendor / productVersions
The GNU C Library / glibcaffected 2.34 through 2.43

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.