Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU C Library 代码注入漏洞
Vulnerability Description
GNU C Library（又名glibc，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU C Library 2.20及之前版本的resolv/res_send.c文件中的‘send_dg’函数存在安全漏洞，该漏洞源于程序没有正确重用文件描述符。远程攻击者可借助大量请求利用该漏洞向任意位置发送DNS查询。
CVSS Information
N/A
Vulnerability Type
N/A