Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-33599
HistoryMay 06, 2024 - 12:00 a.m.

CVE-2024-33599

2024-05-0600:00:00
ubuntu.com
ubuntu.com
37
cve-2024-33599
netgroup cache
low memory
storage conditions
memcpy
sourceware
bugzilla
unix

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

nscd: Stack-based buffer overflow in netgroup cache If the Name Service
Cache Daemon’s (nscd) fixed size cache is exhausted by client requests then
a subsequent client request for netgroup data may result in a stack-based
buffer overflow. This flaw was introduced in glibc 2.15 when the cache was
added to nscd. This vulnerability is only present in the nscd binary.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarcheglibc< anyUNKNOWN
ubuntu18.04noarchglibc< 2.27-3ubuntu1.6+esm3UNKNOWN
ubuntu20.04noarchglibc< 2.31-0ubuntu9.16UNKNOWN
ubuntu22.04noarchglibc< 2.35-0ubuntu3.8UNKNOWN
ubuntu23.10noarchglibc< 2.38-1ubuntu6.3UNKNOWN
ubuntu24.04noarchglibc< 2.39-0ubuntu8.2UNKNOWN
ubuntu16.04noarchglibc< 2.23-0ubuntu11.3+esm7UNKNOWN