7.3
High
CVE-2024-33601 nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup…
Description
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glibc 2.15 | 2.15 → < 2.40 | 2.40 |
| glibc 2.15 | 2.15 → < 2.40 | 2.40 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
References
- sourceware.org sourceware.org
- security.netapp.com security.netapp.com
- lists.debian.org lists.debian.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of glibc
The 35 CVEs of glibc →
CVE-2026-122054
BIG-HKSCS decoding hang on crafted input
5.9
Medium
CVE-2026-84243
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
7.0
High
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
3.7
Low
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
3.6
Low