CVEvulnerability
CVE-2024-33601
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-05-06
- Last modified
- 2026-06-17
- Assigner
- 3ff69d7a-14f2-4f67-a097-88dee7810d18
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-617
Description
nscd: netgroup cache may terminate daemon on memory allocation failure
The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or
xrealloc and these functions may terminate the process due to a memory
allocation failure resulting in a denial of service to the clients. The
flaw was introduced in glibc 2.15 when the cache was added to nscd.
This vulnerability is only present in the nscd binary.
Affected configurations
• gnu glibc (>= 2.15 < 2.40)
• debian debian linux 10.0
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h410s firmware
• netapp h410c firmware
• netapp h610c firmware
• netapp h615c firmware
• netapp h610s firmware
• netapp hci bootstrap os
Related
Weakness · CWE (1)
- CWE-617 Reachable Assertion weakness
References
- http://www.openwall.com/lists/oss-security/2024/07/22/5 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240524-0014/ Third Party Advisory
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 Broken Link
- http://www.openwall.com/lists/oss-security/2024/07/22/5 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240524-0014/ Third Party Advisory
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 Broken Link
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html cert-portal.siemens.com