Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3588
HistoryJun 05, 2024 - 12:00 a.m.

glibc security update

2024-06-0500:00:00
linux.oracle.com
5
glibc
security update
nscd
netgroup cache
cve-2021-27645
cve-2024-33599
cve-2024-33600
cve-2024-33601
cve-2024-33602
cve-2024-2961
rhel-34263
iconv conversion
iso-2022-cn-ext
out of bounds write
memory corruption

9.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

[2.17-326.3]

  • Forward-port Oracle patches to 2.17-326.3
    Reviewed-by: Jose E. Marchesi
    [2.17-326.3]
  • nscd: Fix timeout type in netgroup cache (RHEL-34263)
    [2.17-326.2]
  • nscd: Do not use sendfile for the netgroup cache
  • nscd: Use-after-free in netgroup cache
  • CVE-2021-27645: nscd: double-free in netgroup cache
  • CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
  • CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  • CVE-2024-33601: nscd: crash on out-of-memory condition
  • CVE-2024-33602: nscd: memory corruption with NSS netgroup modules
    [2.17-326.1]
  • CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)