CVE-2024-33599
HighSummary
In nscd, a stack-based buffer overflow may occur when the fixed size cache is exhausted by client requests. A subsequent client request for netgroup data can lead to this flaw.
Risk Assessment
Stack-based buffer overflow can lead to arbitrary code execution, posing a serious security threat to the system. Organizations may be vulnerable to attacks that could result in unauthorized access or system crashes.
Recommendation
It is recommended to update to the latest version of glibc to mitigate this vulnerability. Additionally, monitoring and restricting access to nscd is advised to minimize the risk of exploitation.
Other vulnerabilities in nscd
See all- CVE-2024-33602High
The Name Service Cache Daemon (nscd) has a memory corruption flaw that can occur when the NSS callback does not store all strings in the provided buffer. This issue was introduced in glibc 2.15 when the cache was added to nscd.
- CVE-2024-33601High
The Name Service Cache Daemon (nscd) may terminate due to a memory allocation failure, leading to denial of service for clients. This issue was introduced in glibc 2.15 when the cache was added to nscd.
Original NVD description (English source)
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.