{"action":"Upgrade glibc to 2.36-9+deb12u3 or later.","affected":[{"fixed":"2.36-9+deb12u3","introduced":"0"}],"component":"glibc","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.36-9+deb12u3"],"id":"tcs_01M5NJCPQ21NXJD7WC8HYS11D9","modified_at":"2026-11-08T09:47:29.135502685Z","published_at":"2023-09-18T17:15:55.813Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-4806","https://security-tracker.debian.org/tracker/CVE-2023-4806"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-4806","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-4806"}],"summary":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable w"}