Every CVE Search/ Get API key

CVE-2013-7424

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is...

5.1 MediumFix available

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Exploit likelihood

2.68%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
CVE-2013-7424
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-17
Updated
2026-11-02
CVE List No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
CVE-2013-7424
Updated
2026-11-02
EUVDEUVD-2013-7188 No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
EUVD-2013-7188
Updated
2026-11-03
GitHub AdvisoriesGHSA-cf2r-3fcj-q45r No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is...

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
GHSA-cf2r-3fcj-q45r
Updated
2026-11-02
OSVBELL-CVE-2013-7424 5.1

CVE-2013-7424 does not affect BellSoft software

Record
BELL-CVE-2013-7424
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
CVE-2013-7424
Updated
2026-11-02
OSVDEBIAN-CVE-2013-7424 No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
DEBIAN-CVE-2013-7424
Updated
2026-11-02
OSVUBUNTU-CVE-2013-7424 No score

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Record
UBUNTU-CVE-2013-7424
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
 before 2.15-1
2.15-1
glibc
Debian:13
 before 2.15-1
2.15-1
glibc
Debian:14
 before 2.15-1
2.15-1
eglibc
Debian:6.0
From an advisory covering 18 CVEs
 before 2.11.3-4+deb6u5, plus listed versions
2.11.2-102.11.2-10+m68k.12.11.2-112.11.2-11+m68k.12.11.2-12
Show 5 moreShow less
2.11.2-132.11.3-12.11.3-22.11.3-32.11.3-4
2.11.3-4+deb6u5
eglibc
Debian:7
From an advisory covering 6 CVEs
 before 2.13-38+deb7u8, plus listed versions
2.13-382.13-38+deb7u12.13-38+deb7u22.13-38+deb7u32.13-38+deb7u42.13-38+deb7u52.13-38+deb7u62.13-38+deb7u7
2.13-38+deb7u8
glibc-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-static
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-common
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
Show 47 moreShow less
Affected packages
PackageAffectedFixed
glibc-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-headers
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-utils
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
nscd
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-static
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-headers
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-utils
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
nscd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-static
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-common
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-utils
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
nscd
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-debuginfo-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-static
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-headers
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc-utils
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
nscd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.12-1.149.el6
0:2.12-1.149.el6
glibc
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-common
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-debuginfo-common
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-devel
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-headers
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-utils
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
nscd
Red Hat:enterprise_linux:5::client
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-common
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-debuginfo-common
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-devel
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-headers
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
glibc-utils
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3
nscd
Red Hat:enterprise_linux:5::server
 before 0:2.5-123.el5_11.3
0:2.5-123.el5_11.3

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-7424 is a medium vulnerability (CVSS 5.1) in Gnu Glibc, published February 23, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.68%, the 85th percentile. Fixed in glibc 2.15-1.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open