PT-2024-3320 · Glibc+10 · Glibc+10
Published
2024-04-23
·
Updated
2026-02-14
·
CVE-2024-33599
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
glibc versions 2.15 and later
Description
The issue is a stack-based buffer overflow in the netgroup cache of the Name Service Cache Daemon (nscd). This occurs when the nscd's fixed size cache is exhausted by client requests, and a subsequent client request for netgroup data may result in the buffer overflow. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Recommendations
To resolve the issue, update glibc to a version where the flaw is fixed.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Stack Overflow
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Glibc