VDB
CISA-2024-33601
CISA-2024-33601
PUBLISHED
CVSS 7.3 HIGH
Reported by glibc · Published May 6, 2024
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Risk Scores
CVSS 3.1
7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The GNU C Library | glibc | 2.15 |
| gnu | glibc | 2.15, 2.15 |
| The GNU C Library | glibc | 2.15, 2.15 |
Timeline
- May 6, 2024 CVE Published
- Mar 18, 2025 CVE Updated