CVE-2013-4458

CVE-2013-4458 describes a stack-based buffer overflow in the getaddrinfo function of GNU C Library (glibc) versions 2.18 and earlier, affecting various GNU and SUSE Linux Enterprise products. This vulnerability, an incomplete fix for CVE-2013-1914, allows remote attackers to cause a denial of service (crash) by providing a specially crafted hostname or IP address that generates numerous AF_INET6 address results. Rated with a CVSS score of 5.0 (medium), the vulnerability has a low attack complexity and requires no authentication, but its impact is limited to availability (denial of service). The EPSS score is low, indicating a minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also absent, suggesting a lack of widespread attention or exploitation.