CVE-2024-33602
HighSummary
The Name Service Cache Daemon (nscd) has a memory corruption flaw that can occur when the NSS callback does not store all strings in the provided buffer. This issue was introduced in glibc 2.15 when the cache was added to nscd.
Risk Assessment
Organizations may face memory integrity issues, potentially leading to unpredictable system behavior or service outages.
Recommendation
It is recommended to update to the latest version of glibc to mitigate this vulnerability and to monitor systems for any abnormal behavior.
Other vulnerabilities in nscd
See all- CVE-2024-33601High
The Name Service Cache Daemon (nscd) may terminate due to a memory allocation failure, leading to denial of service for clients. This issue was introduced in glibc 2.15 when the cache was added to nscd.
- CVE-2024-33599High
In nscd, a stack-based buffer overflow may occur when the fixed size cache is exhausted by client requests. A subsequent client request for netgroup data can lead to this flaw.
Original NVD description (English source)
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.