CVE-2021-27645

🗓️ 24 Feb 2021 15:15:00Reported by ubuntu.comType

The GNU C Library (glibc) 2.29 through 2.33 allows a double-free vulnerability in the nameserver caching daemon (nscd) when processing a request for netgroup lookup, potentially leading to degraded service or Denial of Service on the local system

Reporter	Title	Published	Views	Family All 92
ALT Linux	Security fix for the ALT Linux 9 package glibc version 6:2.27-alt14	23 Sep 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2021-27645)	28 Feb 202211:14	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability	15 Dec 202106:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Redhat glibc Vulnerability affects Watson Speech Services	12 Jan 202321:59	–	ibm
Tenable Nessus	AlmaLinux 8 : glibc (ALSA-2021:4358)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : glibc (CESA-2021:4358)	11 Nov 202100:00	–	nessus
Tenable Nessus	Debian dla-3152 : glibc-doc - security update	23 Oct 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2022-1565)	25 Apr 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2022-1724)	26 May 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	20.04	any	glibc	2.31-0ubuntu9.7	glibc_2.31-0ubuntu9.7_any.deb

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-5310-1
cve	www.cve.org/CVERecord

25 Aug 2025 23:34Current

6.8Medium risk

Vulners AI Score6.8

CVSS 21.9

CVSS 3.12.5

EPSS0.00374

SSVC