PT-2017-2244 · Gnu+3 · Glibc+3
Published
2015-12-09
·
Updated
2024-05-16
·
CVE-2014-9984
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
glibc versions prior to 2.20
Description
The issue is related to the nscd daemon in the GNU C Library, where it does not correctly compute the size of an internal buffer when processing netgroup requests. This could lead to a crash of the nscd daemon or potentially allow code execution as the user running nscd. The vulnerability may be exploited by a remote attacker to cause a denial of service or to inject code by running the nscd service.
Recommendations
For versions prior to 2.20, update to version 2.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the nscd daemon to minimize the risk of exploitation.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Suse
Ubuntu
Glibc