Lucene search

K
cve3ff69d7a-14f2-4f67-a097-88dee7810d18CVE-2024-33599
HistoryMay 06, 2024 - 8:15 p.m.

CVE-2024-33599

2024-05-0620:15:11
CWE-121
3ff69d7a-14f2-4f67-a097-88dee7810d18
web.nvd.nist.gov
55
cve-2024-33599
netgroup cache
glibc 2.15
stack-based buffer overflow
name service cache daemon

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon’s (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.