Search/CVE-2013-7423
● CVE

CVE-2013-7423

Vendorcanonical, redhat, gnu, opensuseProductubuntu linux, enterprise linux server aus, glibc, opensuseDiscoveredFeb 24, 2015UpdatedMay 6, 2026

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.

CVSS v3.1
—
EPSS
5.81%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
5 relationships
Timeline
disclosure → media coverage
Feb 24, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026