CVE-2016-10739: GNU Glibc

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.

Affected products

• GNU Glibc: up to and including 2.28
• Opensuse Leap: version 15.0 only

Published 2019-01-21. Last modified 2026-06-17.