Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84599.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-84599
Upstream
  • CVE-2026-5435
Published
2026-04-28T13:19:22Z
Modified
2026-10-01T05:34:12Z
Summary
CVE-2026-5435 affecting package glibc 2.38-21
Details

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

References

Affected packages

Azure Linux:3 / glibc

Package

Name
glibc
Purl
pkg:rpm/azure-linux/glibc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.38-21

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84599.json"