CVE-2014-3484: Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x...

Security readout for executives and security teams

CVE-2014-3484 affects older musl libc versions used by some Linux systems and embedded or container images. A malformed DNS response can trigger stack-based buffer overflows in name expansion, causing at least crashes and possibly other unspecified impact. No provided source shows active exploitation. Exposure is likely limited to assets using the affected musl libc ranges, especially older Alpine-like, embedded, appliance, or statically linked software builds that perform DNS resolution. Treat this as a targeted legacy dependency cleanup issue, not an emergency without more evidence. Prioritize internet-facing, embedded, or containerized workloads using old musl versions. Mitigation focus: Inventory systems and binaries that use musl libc.; Upgrade musl to a release outside the affected ranges.; Prioritize externally connected systems that perform DNS lookups..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.