What is GHSA-935r-rfch-9mr7?

GHSA-935r-rfch-9mr7 is a security advisory published by GitHub Security Advisories with Medium severity. Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the...

Which CVE IDs does GHSA-935r-rfch-9mr7 cover?

GHSA-935r-rfch-9mr7 covers the following CVE IDs: CVE-2026-4438. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-935r-rfch-9mr7?

GHSA-935r-rfch-9mr7 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-935r-rfch-9mr7MediumCVSS 5.4

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the...

Vendor

GitHub Security Advisories

Published

March 20, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-4438 →

📋 Description

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-4438
https://sourceware.org/bugzilla/show_bug.cgi?id=34015
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
https://github.com/advisories/GHSA-935r-rfch-9mr7