GNU libc Vulnerabilities Allow DNS Response Manipulation

CERT-Bund has released security advisory WID-SEC-2026-0817 detailing multiple vulnerabilities in GNU libc, the core C library for Linux and other Unix-like operating systems. The vulnerabilities, with a CVSS Base Score of 5.9, allow remote, anonymous attackers to manipulate DNS responses. The advisory specifically identifies Open Source GNU libc versions 2.34 through 2.43 as affected.

Organizations utilizing Linux or other Unix-based systems that rely on the affected GNU libc versions should review the advisory for mitigation strategies. While no specific compliance deadline is provided, prompt patching or applying vendor-recommended mitigations is crucial to prevent potential DNS manipulation attacks, which could lead to redirection to malicious sites or denial-of-service conditions.