p PatchFirst

CVE-2024-33601

CVE-2024-33601 · nscd: netgroup cache may terminate daemon on memory allocation failure

This page contains facts from public vulnerability sources. Check the original advisory before updating.

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

CVSS 7.3 · High · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • glibc

    Versions
    • ≥ 2.15, < 2.40: Affected (custom)

    Update to 2.40

  • glibc Debian:12

    Versions
    • 2.36-9
    • 2.36-9+deb12u1
    • 2.36-9+deb12u2
    • 2.36-9+deb12u3
    • 2.36-9+deb12u4
    • 2.36-9+deb12u5
    • 2.36-9+deb12u6
    Affected ranges
    • ECOSYSTEM: < 2.36-9+deb12u7

    Update to 2.36-9+deb12u7

  • glibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.37-19

    Update to 2.37-19

  • glibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.37-19

    Update to 2.37-19

  • eglibc Ubuntu:Pro:14.04:LTS

    Versions
    • 2.17-93ubuntu4
    • 2.18-0ubuntu1
    • 2.18-0ubuntu2
    • 2.18-0ubuntu4
    • 2.18-0ubuntu5
    • 2.18-0ubuntu6
    • 2.18-0ubuntu7
    • 2.19-0ubuntu2
    • 2.19-0ubuntu3
    • 2.19-0ubuntu4
    • 2.19-0ubuntu5
    • 2.19-0ubuntu6
    • 2.19-0ubuntu6.1
    • 2.19-0ubuntu6.3
    • 2.19-0ubuntu6.4
    • 2.19-0ubuntu6.5
    • 2.19-0ubuntu6.6
    • 2.19-0ubuntu6.7
    • 2.19-0ubuntu6.8
    • 2.19-0ubuntu6.9
    • 2.19-0ubuntu6.10
    • 2.19-0ubuntu6.11
    • 2.19-0ubuntu6.13
    • 2.19-0ubuntu6.14
    • 2.19-0ubuntu6.15
    • 2.19-0ubuntu6.15+esm1
    • 2.19-0ubuntu6.15+esm2
    • 2.19-0ubuntu6.15+esm3
    • 2.19-0ubuntu6.15+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glibc Ubuntu:Pro:16.04:LTS

    Versions
    • 2.21-0ubuntu4
    • 2.21-0ubuntu5
    • 2.21-0ubuntu6
    • 2.23-0ubuntu1
    • 2.23-0ubuntu2
    • 2.23-0ubuntu3
    • 2.23-0ubuntu4
    • 2.23-0ubuntu5
    • 2.23-0ubuntu6
    • 2.23-0ubuntu7
    • 2.23-0ubuntu9
    • 2.23-0ubuntu10
    • 2.23-0ubuntu11
    • 2.23-0ubuntu11.2
    • 2.23-0ubuntu11.3
    • 2.23-0ubuntu11.3+esm1
    • 2.23-0ubuntu11.3+esm2
    • 2.23-0ubuntu11.3+esm3
    • 2.23-0ubuntu11.3+esm5
    • 2.23-0ubuntu11.3+esm6
    Affected ranges
    • ECOSYSTEM: < 2.23-0ubuntu11.3+esm7

    Update to 2.23-0ubuntu11.3+esm7

  • glibc Ubuntu:Pro:18.04:LTS

    Versions
    • 2.26-0ubuntu2
    • 2.26-0ubuntu2.1
    • 2.27-0ubuntu2
    • 2.27-0ubuntu3
    • 2.27-3ubuntu1
    • 2.27-3ubuntu1.2
    • 2.27-3ubuntu1.3
    • 2.27-3ubuntu1.4
    • 2.27-3ubuntu1.5
    • 2.27-3ubuntu1.6
    • 2.27-3ubuntu1.6+esm1
    • 2.27-3ubuntu1.6+esm2
    Affected ranges
    • ECOSYSTEM: < 2.27-3ubuntu1.6+esm3

    Update to 2.27-3ubuntu1.6+esm3

  • glibc Ubuntu:20.04:LTS

    Versions
    • 2.30-0ubuntu2
    • 2.30-0ubuntu3
    • 2.31-0ubuntu5
    • 2.31-0ubuntu6
    • 2.31-0ubuntu7
    • 2.31-0ubuntu9
    • 2.31-0ubuntu9.1
    • 2.31-0ubuntu9.2
    • 2.31-0ubuntu9.3
    • 2.31-0ubuntu9.7
    • 2.31-0ubuntu9.9
    • 2.31-0ubuntu9.12
    • 2.31-0ubuntu9.14
    • 2.31-0ubuntu9.15
    Affected ranges
    • ECOSYSTEM: < 2.31-0ubuntu9.16

    Update to 2.31-0ubuntu9.16

  • glibc Ubuntu:22.04:LTS

    Versions
    • 2.34-0ubuntu3
    • 2.35-0ubuntu1
    • 2.35-0ubuntu3
    • 2.35-0ubuntu3.1
    • 2.35-0ubuntu3.3
    • 2.35-0ubuntu3.4
    • 2.35-0ubuntu3.5
    • 2.35-0ubuntu3.6
    • 2.35-0ubuntu3.7
    Affected ranges
    • ECOSYSTEM: < 2.35-0ubuntu3.8

    Update to 2.35-0ubuntu3.8

  • glibc Ubuntu:24.04:LTS

    Versions
    • 2.38-1ubuntu6
    • 2.38-3ubuntu1
    • 2.39-0ubuntu1
    • 2.39-0ubuntu2
    • 2.39-0ubuntu6
    • 2.39-0ubuntu8
    • 2.39-0ubuntu8.1
    Affected ranges
    • ECOSYSTEM: < 2.39-0ubuntu8.2

    Update to 2.39-0ubuntu8.2

Original sources

Check your server →