Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-33600
HistoryMay 06, 2024 - 12:00 a.m.

CVE-2024-33600

2024-05-0600:00:00
ubuntu.com
ubuntu.com
22
nscd
netgroup cache
unix
cve-2024-33600

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

nscd: Null pointer crashes after notfound response If the Name Service
Cache Daemon’s (nscd) cache fails to add a not-found netgroup response to
the cache, the client request can result in a null pointer dereference.
This flaw was introduced in glibc 2.15 when the cache was added to nscd.
This vulnerability is only present in the nscd binary.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarcheglibc< anyUNKNOWN
ubuntu18.04noarchglibc< 2.27-3ubuntu1.6+esm3UNKNOWN
ubuntu20.04noarchglibc< 2.31-0ubuntu9.16UNKNOWN
ubuntu22.04noarchglibc< 2.35-0ubuntu3.8UNKNOWN
ubuntu23.10noarchglibc< 2.38-1ubuntu6.3UNKNOWN
ubuntu24.04noarchglibc< 2.39-0ubuntu8.2UNKNOWN
ubuntu16.04noarchglibc< 2.23-0ubuntu11.3+esm7UNKNOWN