nscd: Null pointer crashes after notfound response
If the Name Service Cache Daemon's (nscd) cache fails to add a not-found
netgroup response to the cache, the client request can result in a null
pointer dereference. This flaw was introduced in glibc 2.15 when the
cache was added to nscd.
This vulnerability is only present in the nscd binary.
CVSS
No CVSS.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2024/07/22/5 | Mailing List Third Party Advisory |
http://www.openwall.com/lists/oss-security/2024/07/22/5 | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20240524-0013/ | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20240524-0013/ | Third Party Advisory |
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 | Broken Link |
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 | Broken Link |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
|
History
18 Jun 2025, 14:50
Type | Values Removed | Values Added |
---|---|---|
First Time |
Netapp h610c
Gnu Netapp h300s Netapp h610c Firmware Netapp h410c Netapp active Iq Unified Manager Netapp h500s Netapp h500s Firmware Gnu glibc Netapp h700s Netapp hci Bootstrap Os Netapp h410s Firmware Netapp h700s Firmware Netapp h615c Netapp h410c Firmware Netapp h300s Firmware Netapp h610s Netapp h615c Firmware Netapp h610s Firmware Netapp Netapp h410s Debian debian Linux Debian |
|
CPE | cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* |
|
References | () https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 - Broken Link | |
References | () http://www.openwall.com/lists/oss-security/2024/07/22/5 - Mailing List, Third Party Advisory | |
References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - Mailing List, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20240524-0013/ - Third Party Advisory |
13 Feb 2025, 18:18
Type | Values Removed | Values Added |
---|---|---|
Summary | nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. |
22 Jul 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Jun 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 17:16
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 May 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-06 20:15
Updated : 2025-06-18 14:50
NVD link : CVE-2024-33600
Mitre link : CVE-2024-33600
JSON object : View
Products Affected
netapp
- h615c_firmware
- h610c
- h615c
- h300s
- h410s_firmware
- active_iq_unified_manager
- h500s
- h410s
- h610s
- h700s
- h300s_firmware
- h410c_firmware
- h410c
- h610s_firmware
- hci_bootstrap_os
- h700s_firmware
- h500s_firmware
- h610c_firmware
debian
- debian_linux
gnu
- glibc
CWE
No CWE.