Lucene search

K
nvd3ff69d7a-14f2-4f67-a097-88dee7810d18NVD:CVE-2024-33600
HistoryMay 06, 2024 - 8:15 p.m.

CVE-2024-33600

2024-05-0620:15:11
CWE-476
3ff69d7a-14f2-4f67-a097-88dee7810d18
web.nvd.nist.gov
cve-2024-33600
name service cache daemon
glibc 2.15
null pointer dereference
netgroup response
vulnerability

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

nscd: Null pointer crashes after notfound response

If the Name Service Cache Daemon’s (nscd) cache fails to add a not-found
netgroup response to the cache, the client request can result in a null
pointer dereference. This flaw was introduced in glibc 2.15 when the
cache was added to nscd.

This vulnerability is only present in the nscd binary.