Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-4437 Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…

Description

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → < 3.1.6 3.1.6
glibc 2.34 2.34 → 2.43 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Les 1132 CVE de SIMATIC S7-1500 CPU 1518-4 PN/DP MFP →
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Moyenne CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Moyenne CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Moyenne CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critique
Suivre cette CVE