FlawAtlas
Search the atlas
CVE-2018-19591 High

CVE-2018-19591

In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

Exploit probability 5.5%
Published December 4, 2018
Required by Not available
Last source change August 19, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

1211 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2018-19591

In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

View original source

05 / REFERENCES

Further evidence