How many CVEs have patched nss_status?

19 published CVEs changed nss_status in debian/glibc, in 11 distinct patches totalling 3,957 changed lines, between 2014 and 2026.

What is the latest CVE that changed nss_status?

CVE-2025-15281 (wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory), published 2026-01-20, changed lines 187 to 1155 of resolv/nss_dns/dns-host.c.

How does nss_status compare to the rest of debian/glibc?

debian/glibc has 23 CVEs with a located fix in total; 19 of them changed nss_status.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

nss_status in debian/glibc: Patched by 19 CVEs

Name: nss_status in debian/glibc: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

nss_status in debian/glibc: Patched by 19 CVEs

CVEs that patched it

Every published CVE whose fix changed nss_status, newest first, with the lines each fix touched.

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · resolv/nss_dns/dns-host.c · lines 187–1155 · +290 −591 in 3 hunks
High · CVSS 7.5
EPSS 0.5%2026-01-20
CVE-2025-0395
CVE-2025-0395 · resolv/nss_dns/dns-host.c · lines 187–1155 · +290 −591 in 3 hunks
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · resolv/nss_dns/dns-host.c · lines 187–1155 · +290 −591 in 3 hunks
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · resolv/nss_dns/dns-host.c · lines 187–1155 · +290 −591 in 3 hunks
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
CVE-2020-27618
CVE-2020-27618 · nss/nss_compat/compat-grp.c · lines 145–174 · +10 −1 in 2 hunks
Medium · CVSS 5.5
EPSS 0.9%2021-02-26
CVE-2020-27618
CVE-2020-27618 · nss/nss_compat/compat-initgroups.c · lines 136–168 · +10 −1 in 2 hunks
Medium · CVSS 5.5
EPSS 0.9%2021-02-26
CVE-2020-27618
CVE-2020-27618 · nss/nss_compat/compat-pwd.c · lines 262–298 · +10 −1 in 2 hunks
Medium · CVSS 5.5
EPSS 0.9%2021-02-26
CVE-2020-27618
CVE-2020-27618 · nss/nss_compat/compat-spwd.c · lines 218–273 · +10 −2 in 3 hunks
Medium · CVSS 5.5
EPSS 0.9%2021-02-26
CVE-2019-25013
CVE-2019-25013 · nss/nss_compat/compat-grp.c · lines 145–174 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 3.6%2021-01-04
CVE-2019-25013
CVE-2019-25013 · nss/nss_compat/compat-initgroups.c · lines 136–168 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 3.6%2021-01-04
CVE-2019-25013
CVE-2019-25013 · nss/nss_compat/compat-pwd.c · lines 262–298 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 3.6%2021-01-04
CVE-2019-25013
CVE-2019-25013 · nss/nss_compat/compat-spwd.c · lines 218–273 · +10 −2 in 3 hunks
Medium · CVSS 5.9
EPSS 3.6%2021-01-04
CVE-2020-29562
CVE-2020-29562 · nss/nss_compat/compat-grp.c · lines 145–174 · +10 −1 in 2 hunks
Medium · CVSS 4.8
EPSS 1.7%2020-12-04
CVE-2020-29562
CVE-2020-29562 · nss/nss_compat/compat-initgroups.c · lines 136–168 · +10 −1 in 2 hunks
Medium · CVSS 4.8
EPSS 1.7%2020-12-04
CVE-2020-29562
CVE-2020-29562 · nss/nss_compat/compat-pwd.c · lines 262–298 · +10 −1 in 2 hunks
Medium · CVSS 4.8
EPSS 1.7%2020-12-04
CVE-2020-29562
CVE-2020-29562 · nss/nss_compat/compat-spwd.c · lines 218–273 · +10 −2 in 3 hunks
Medium · CVSS 4.8
EPSS 1.7%2020-12-04
CVE-2020-6096
CVE-2020-6096 · nss/nss_compat/compat-grp.c · lines 145–174 · +10 −1 in 2 hunks
High · CVSS 8.1
EPSS 5.5%2020-04-01
CVE-2020-6096
CVE-2020-6096 · nss/nss_compat/compat-initgroups.c · lines 136–168 · +10 −1 in 2 hunks
High · CVSS 8.1
EPSS 5.5%2020-04-01
CVE-2020-6096
CVE-2020-6096 · nss/nss_compat/compat-pwd.c · lines 262–298 · +10 −1 in 2 hunks
High · CVSS 8.1
EPSS 5.5%2020-04-01
CVE-2020-6096
CVE-2020-6096 · nss/nss_compat/compat-spwd.c · lines 218–273 · +10 −2 in 3 hunks
High · CVSS 8.1
EPSS 5.5%2020-04-01
CVE-2019-9169
CVE-2019-9169 · resolv/nss_dns/dns-host.c · lines 277–371 · +22 −2 in 5 hunks
Critical · CVSS 9.8
EPSS 4.7%2019-02-26
CVE-2019-7309
CVE-2019-7309 · resolv/nss_dns/dns-host.c · lines 277–371 · +22 −2 in 5 hunks
Medium · CVSS 5.5
EPSS 0.6%2019-02-03
CVE-2016-10739
CVE-2016-10739 · resolv/nss_dns/dns-host.c · lines 277–371 · +22 −2 in 5 hunks
Medium · CVSS 5.3
EPSS 0.5%2019-01-21
CVE-2019-6488
CVE-2019-6488 · resolv/nss_dns/dns-host.c · lines 277–371 · +22 −2 in 5 hunks
High · CVSS 7.8
EPSS 0.4%2019-01-18
CVE-2018-19591
CVE-2018-19591 · resolv/nss_dns/dns-host.c · lines 277–371 · +22 −2 in 5 hunks
High · CVSS 7.5
EPSS 5.5%2018-12-04
CVE-2015-5180
CVE-2015-5180 · resolv/nss_dns/dns-host.c · line 326 · +1 −1
High · CVSS 7.5
EPSS 6.2%2017-06-27
CVE-2016-10228
CVE-2016-10228 · nss/nss_compat/compat-grp.c · lines 145–174 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 4.1%2017-03-02
CVE-2016-10228
CVE-2016-10228 · nss/nss_compat/compat-initgroups.c · lines 136–168 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 4.1%2017-03-02
CVE-2016-10228
CVE-2016-10228 · nss/nss_compat/compat-pwd.c · lines 262–298 · +10 −1 in 2 hunks
Medium · CVSS 5.9
EPSS 4.1%2017-03-02
CVE-2016-10228
CVE-2016-10228 · nss/nss_compat/compat-spwd.c · lines 218–273 · +10 −2 in 3 hunks
Medium · CVSS 5.9
EPSS 4.1%2017-03-02
CVE-2016-6323
CVE-2016-6323 · resolv/nss_dns/dns-host.c · line 326 · +1 −1
High · CVSS 7.5
EPSS 3.9%2016-10-07
CVE-2014-4043
CVE-2014-4043 · inet/getnetgrent_r.c · lines 238–245 · +8 −0
High · CVSS 7.5
EPSS 3.9%2014-10-06
CVE-2014-4043
CVE-2014-4043 · nscd/netgroupcache.c · lines 324–335 · +8 −1
High · CVSS 7.5
EPSS 3.9%2014-10-06
CVE-2014-4043
CVE-2014-4043 · resolv/nss_dns/dns-host.c · lines 311–324 · +9 −2
High · CVSS 7.5
EPSS 3.9%2014-10-06
CVE-2014-5119
CVE-2014-5119 · inet/getnetgrent_r.c · lines 238–245 · +8 −0
High · CVSS 7.5
EPSS 17.0%2014-08-29
CVE-2014-5119
CVE-2014-5119 · nscd/netgroupcache.c · lines 324–335 · +8 −1
High · CVSS 7.5
EPSS 17.0%2014-08-29
CVE-2014-5119
CVE-2014-5119 · resolv/nss_dns/dns-host.c · lines 311–324 · +9 −2
High · CVSS 7.5
EPSS 17.0%2014-08-29
CVE-2014-0475
CVE-2014-0475 · inet/getnetgrent_r.c · lines 238–245 · +8 −0
Medium · CVSS 6.8
EPSS 2.7%2014-07-29
CVE-2014-0475
CVE-2014-0475 · nscd/netgroupcache.c · lines 324–335 · +8 −1
Medium · CVSS 6.8
EPSS 2.7%2014-07-29
CVE-2014-0475
CVE-2014-0475 · resolv/nss_dns/dns-host.c · lines 311–324 · +9 −2
Medium · CVSS 6.8
EPSS 2.7%2014-07-29

Get an alert when the next CVE fix lands in debian/glibc, with the patched functions.

Monitor glibc CVEs

nss_status

Overview

CVEs that patched it

Other hotspots in the repository

Frequently asked questions

References

Track debian/glibc CVEs