CVE-2016-10739: In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a...

Security readout for executives and security teams

glibc could treat a partly valid-looking IP address as acceptable even when extra text followed it. Business risk depends on applications that used this parsing result to validate destinations or headers. The issue is in a common system library, but the source bundle provides no CVSS score and no active exploitation evidence. Linux systems or appliances using glibc/libc6 through 2.28 may be exposed, especially applications that validate user-supplied host or address strings with getaddrinfo. Track this as a moderate patching and validation issue. Prioritize internet-facing services and platforms that process user-supplied addresses, then complete normal OS security update cycles. Mitigation focus: Apply vendor glibc/libc6 security updates from your Linux distribution.; Check Red Hat and openSUSE advisories for package-specific remediation details.; Review applications that validate user-supplied host strings using getaddrinfo..

Prepared

Jun 7, 2026, 04:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.