GNU glibc up to 2.42 nsswitch.conf getnetbyaddr/getnetbyaddr_r uninitialized resource

Summaryinfo

A vulnerability has been found in GNU glibc up to 2.42 and classified as problematic. Affected by this issue is the function getnetbyaddr/getnetbyaddr_r of the file nsswitch.conf. Performing a manipulation results in uninitialized resource. This vulnerability was named CVE-2026-0915. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, was found in GNU glibc up to 2.42. This affects the function getnetbyaddr/getnetbyaddr_r of the file nsswitch.conf. The manipulation with an unknown input leads to a uninitialized resource vulnerability. CWE is classifying the issue as CWE-908. The product uses or accesses a resource that has not been initialized. This is going to have an impact on confidentiality. The summary by CVE is:

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

The weakness was presented by Igor Morgenstern. It is possible to read the advisory at sourceware.org. This vulnerability is uniquely identified as CVE-2026-0915 since 01/13/2026. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 296551 (Fedora 43 : glibc (2026-205d532069)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (296551), EUVD (EUVD-2026-2855) and CERT Bund (WID-SEC-2026-0132). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• Open Source GNU libc
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• Dell Secure Connect Gateway

Productinfo

Type

• Software Library

Vendor

• GNU

Name

• glibc

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.25
• 2.26
• 2.27
• 2.28
• 2.29
• 2.30
• 2.31
• 2.32
• 2.33
• 2.34
• 2.35
• 2.36
• 2.37
• 2.38
• 2.39
• 2.40
• 2.41
• 2.42

License

• open-source

Website

• Vendor: https://www.gnu.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion