Fluid Attacks Database

Description

The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	glibc	>=0 <2.5-1	2.5-1
debian 14	glibc	>=0 <2.5-1	2.5-1
debian 12	glibc	>=0 <2.5-1	2.5-1
debian 13	glibc	>=0 <2.5-1	2.5-1

Aliases

1. CVE-2006-72542. NVD-2006-72543. OSV-DEBIAN-2006-72544. OSV-2006-72545. SECURITY-TRACKER-CVE-2006-7254

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.