DEBIAN-CVE-2024-33601
Record from OSV · Published May 6, 2024
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| glibc | Debian:13 | 2.37-19 |
| glibc | Debian:12 | 2.36-9+deb12u7 |
| glibc | Debian:14 | 2.37-19 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | glibc | 0 |
| Debian:12 | glibc | 0, 2.36-9, 2.36-9+deb12u1 |
| Debian:14 | glibc | 0 |
Timeline
- May 6, 2024 CVE Published
- Sep 15, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2024-33601
vulnetix vdb fixes DEBIAN-CVE-2024-33601Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2024-33601/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart