CVE-2026-5358
glibc: glibc: Data corruption or denial of service via buffer overflow in nis_local_principal function
Severity
ImportantRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 21, 2026
Updated · November 5, 2026
Description
A flaw was found in glibc. The legacy Network Information Service (NIS) implementation in the nis_local_principal function contains a buffer overflow vulnerability. A remote attacker can exploit this flaw by sending a spoofed response to a User Datagram Protocol (UDP) request generated by the function. This issue allows the attacker to overwrite neighboring static application memory, potentially leading to data corruption or a denial of service.
Statement
This CVE has been marked as Rejected by the assigning CNA.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-120 · Buffer Copy without Checking Size of Input