CVE-2024-33600
MediumSummary
In glibc 2.15, a bug was introduced in the nscd daemon that causes a null pointer dereference when a not-found netgroup response is not added to the cache. This leads to a crash of nscd.
Risk Assessment
An attacker can exploit this vulnerability to perform a Denial of Service (DoS) attack on the nscd service, potentially disrupting applications that rely on network name resolution.
Recommendation
Update glibc to a version containing the fix for CVE-2024-33600. If an update is not possible, consider disabling nscd or restricting access to it.
Original NVD description (English source)
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vu