PT-2024-3321 · Glibc+10 · Glibc+10
Published
2024-04-24
·
Updated
2026-02-18
·
CVE-2024-33600
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
glibc versions 2.15 and later
Description
The Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, resulting in a null pointer dereference when a client request is made. This flaw was introduced in glibc 2.15 when the cache was added to nscd. The vulnerability is only present in the nscd binary. It is estimated that 50 images are affected.
Recommendations
For glibc version 2.15 and later, update to a version where the flaw is fixed, or as a temporary workaround, consider disabling the nscd binary until a patch is available.
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Glibc