CVE-2016-3706: GNU Glibc

High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.

Affected products

• GNU Glibc: before 2.23 (fixed in 2.23)
• Opensuse Opensuse: version 13.2 only

Published 2016-06-10. Last modified 2026-06-17.