7.5
High
CVE-2026-4437 Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…
Description
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| glibc 2.34 | 2.34 → 2.43 | No fix stated |
Other CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The 1132 CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Medium
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Medium
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Medium
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critical