CVE-2013-7424: The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allow...

Security readout for executives and security teams

This is an old glibc resolver flaw affecting systems using glibc before 2.15 with libidn support when AI_IDN name resolution is used. A crafted internationalized domain name could crash a process and may allow code execution, but the public record here does not prove active exploitation. Exposure is most likely on legacy Linux systems or appliances running glibc before 2.15, with libidn-enabled builds, where applications resolve internationalized domain names using AI_IDN. Modern supported distributions are less likely exposed, but vendor backports must be checked. Treat this as a legacy-platform hygiene issue unless affected resolver paths are confirmed in exposed services. Prioritize patch verification on old Linux systems and vendor-managed appliances, but do not escalate as actively exploited based on the provided evidence. Mitigation focus: Apply vendor-supported glibc updates that include the CVE-2013-7424 fix or backport.; Check distribution advisories, including Red Hat RHSA-2015:1627, for affected package status.; Prioritize legacy systems, appliances, and containers with glibc before 2.15..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.