Fluid Attacks Database

Description

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	glibc	=2.31-13 \|\| =2.31-13+deb11u1 \|\| =2.31-13+deb11u2 \|\| =2.31-13+deb11u3 \|\| =2.31-13+deb11u4 \|\| =2.31-13+deb11u5 \|\| =2.31-13+deb11u6 \|\| =2.31-13+deb11u7 \|\| =2.31-13+deb11u8 \|\| =2.31-13+deb11u9 \|\| >=0 <2.31-13+deb11u10	2.31-13+deb11u10
debian 12	glibc	=2.36-9 \|\| =2.36-9+deb12u1 \|\| =2.36-9+deb12u2 \|\| =2.36-9+deb12u3 \|\| =2.36-9+deb12u4 \|\| =2.36-9+deb12u5 \|\| =2.36-9+deb12u6 \|\| >=0 <2.36-9+deb12u7	2.36-9+deb12u7
debian 13	glibc	>=0 <2.37-19	2.37-19
debian 14	glibc	>=0 <2.37-19	2.37-19
rpm rhel6	glibc	-	-
rpm rhel9	glibc	<0:2.34-100.el9_4.2	0:2.34-100.el9_4.2
rpm rhel7	glibc	<0:2.17-326.el7_9.3	0:2.17-326.el7_9.3
rpm rhel8.8	glibc	<0:2.28-225.el8_8.11	0:2.28-225.el8_8.11
rpm rhel9.0	glibc	<0:2.34-28.el9_0.6	0:2.34-28.el9_0.6
rpm rhel8	glibc	<0:2.28-251.el8_10.2	0:2.28-251.el8_10.2

1-10 of 12

Aliases

1. CVE-2024-336012. NVD-2024-336013. OSV-DEBIAN-2024-336014. OSV-2024-336015. SECURITY-TRACKER-CVE-2024-33601

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.