Published: 25 September 2023
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
as of 2023-10-19, no releases are vulnerable to this CVE, as the fix for CVE-2023-4806 has not yet been applied to glibc in any of these releases. Whenever CVE-2023-4806 is patched, the patch for CVE-2023-5156 must be included as well in order to avoid regressions and the inclusion of a new vulnerability in glibc. the backports used to patch xenial, bionic and focal for CVE-2023-4806 do not introduce this vulnerability.
Severity score breakdown