CVE-2024-33599 nscd: Stack-based buffer overflow in netgroup cache

2024-05-0619:21:54

CWE-121

glibc

www.cve.org

nscd

buffer overflow

netgroup cache

glibc 2.15

9.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon’s (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "glibc",
    "vendor": "The GNU C Library",
    "versions": [
      {
        "lessThan": "2.40",
        "status": "affected",
        "version": "2.15",
        "versionType": "custom"
      }
    ]
  }
]