CVE-2014-9984

Critical

Published: 12/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

nscd in the GNU C Library (glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

Risk Assessment

The organization may be exposed to service crashes or unauthorized code execution, potentially leading to serious security implications.

Recommendation

It is recommended to update the glibc library to version 2.20 or later to mitigate this vulnerability.

Original NVD description (English source)

nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.