CVE-2024-33599
Published: 6 May 2024
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Priority
Status
Package | Release | Status |
---|---|---|
eglibc
Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Needs triage
|
|
upstream |
Needs triage
|
|
glibc
Launchpad, Ubuntu, Debian |
bionic |
Released
(2.27-3ubuntu1.6+esm3)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Released
(2.31-0ubuntu9.16)
|
|
jammy |
Released
(2.35-0ubuntu3.8)
|
|
mantic |
Released
(2.38-1ubuntu6.3)
|
|
noble |
Released
(2.39-0ubuntu8.2)
|
|
upstream |
Needs triage
|
|
xenial |
Released
(2.23-0ubuntu11.3+esm7)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
Patches:
upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=87801a8fd06db1d654eea3e4f7626ff476a9bdaa |
||
Binaries built from this source package are in Universe and so are supported by the community. |