GNU glibc is vulnerable to a heap-based buffer overflow, caused by an incorrect buffer size computation by the __nss_hostname_digits.