CVE-2016-5417
glibc: per-thread memory leak in __res_vinit with IPv6 nameservers
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · August 2, 2016
Updated · May 13, 2026
Description
Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 3.7CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 · 2.6AV:N/AC:H/Au:N/C:P/I:N/A:N
CWE not specified