Skip to content
Sign in
5.4 Medium

CVE-2026-4438 Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…

Description

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Affected products and versions

Product Affected versions Fixed in
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
glibc 2.34 2.34 → 2.43 No fix stated

Other CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

The 1132 CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP →
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Medium CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Medium CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Medium CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critical
Track this CVE