Debian/glibc: medium 4.2
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for
Action: Upgrade glibc to 2.43-7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.43-7 | - |
Fixed versions
| 2.43-7 |
Sources
- osv: DEBIAN-CVE-2026-89092#Debian:14/glibc
- https://security-tracker.debian.org/tracker/CVE-2026-89092
published · modified · JSON