CVE-2024-33601
HighSummary
The Name Service Cache Daemon (nscd) may terminate due to a memory allocation failure, leading to denial of service for clients. This issue was introduced in glibc 2.15 when the cache was added to nscd.
Risk Assessment
The organization may experience service outages affecting clients using nscd. Potential crashes could disrupt the operation of applications dependent on this daemon.
Recommendation
It is recommended to monitor and update nscd to the latest version to minimize the risk of this vulnerability. Additionally, consider implementing redundancy mechanisms for services relying on nscd.
Other vulnerabilities in nscd
See all- CVE-2024-33602High
The Name Service Cache Daemon (nscd) has a memory corruption flaw that can occur when the NSS callback does not store all strings in the provided buffer. This issue was introduced in glibc 2.15 when the cache was added to nscd.
- CVE-2024-33599High
In nscd, a stack-based buffer overflow may occur when the fixed size cache is exhausted by client requests. A subsequent client request for netgroup data can lead to this flaw.
Original NVD description (English source)
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.