CVE detail
CVE-2026-0915
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
Network firewall distribution IPFire released Core Update 200, marking the 200th incremental update to the 2.29 branch. The release bundles a kernel upgrade, a beta domain blocklist service, security patches for OpenSSL and glibc, and a range of component updates. The kernel has been rebased on Linux 6.18.7 LTS, bringing updated hardware security mitigations alongside network throughput and latency improvements. Linux developers deprecated ReiserFS support in this kernel line, and IPFire installations running on that … More →
newswww.helpnetsecurity.comMar 2, 2026, 3:49 PMLinked URL: https://www.phoronix.com/news/Glibc-Security-Fix-For-1996-Bug | Posted by akyuu | 13 points | 0 comments
communitynews.ycombinator.comJan 23, 2026, 6:08 PMLinked URL: https://www.phoronix.com/news/Glibc-Security-Fix-For-1996-Bug | Posted by i-con | 11 points | 1 comments
communitynews.ycombinator.comJan 17, 2026, 9:45 PM- http://www.openwall.com/lists/oss-security/2026/01/16/6www.openwall.com
No excerpt available.
Exploitwww.openwall.comJan 15, 2026, 10:16 PM - https://sourceware.org/bugzilla/show_bug.cgi?id=33802sourceware.org
No excerpt available.
Exploitsourceware.orgJan 15, 2026, 10:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-15281CVSS 7.5 · High
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_w…
- CVE-2026-66038CVSS 7.1 · High
FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap me…
- CVE-2026-66034CVSS 7.7 · High
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds…
- CVE-2026-47247CVSS 7.5 · High
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid…
- CVE-2026-16386CVSS 7.5 · High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
- CVE-2026-16385CVSS 7.5 · High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.