nscd: netgroup cache may terminate daemon on memory allocation failure
The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or
xrealloc and these functions may terminate the process due to a memory
allocation failure resulting in a denial of service to the clients. The
flaw was introduced in glibc 2.15 when the cache was added to nscd.
This vulnerability is only present in the nscd binary.
CVSS
No CVSS.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2024/07/22/5 | Mailing List Third Party Advisory |
http://www.openwall.com/lists/oss-security/2024/07/22/5 | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20240524-0014/ | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20240524-0014/ | Third Party Advisory |
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 | Broken Link |
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 | Broken Link |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
History
01 Aug 2025, 01:56
Type | Values Removed | Values Added |
---|---|---|
First Time |
Netapp h615c
Netapp h610s Netapp h615c Firmware Netapp h610s Firmware Netapp hci Compute Node |
|
CPE | cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* |
18 Jun 2025, 14:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2024/07/22/5 - Mailing List, Third Party Advisory | |
References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html - Mailing List, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20240524-0014/ - Third Party Advisory | |
References | () https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 - Broken Link | |
First Time |
Netapp h610c
Gnu Netapp h300s Netapp h610c Firmware Netapp h410c Netapp h500s Netapp h500s Firmware Gnu glibc Netapp hci Bootstrap Os Netapp h410s Firmware Netapp h700s Firmware Netapp h410c Firmware Netapp h300s Firmware Netapp h410s Netapp Netapp h700s Debian debian Linux Debian |
|
CPE | cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* |
13 Feb 2025, 18:18
Type | Values Removed | Values Added |
---|---|---|
Summary | nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary. |
22 Jul 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Jun 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 May 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-06 20:15
Updated : 2025-08-01 01:56
NVD link : CVE-2024-33601
Mitre link : CVE-2024-33601
JSON object : View
Products Affected
netapp
- h615c_firmware
- h610c
- h615c
- h300s
- h410s_firmware
- h500s
- h410s
- h610s
- h700s
- h300s_firmware
- h410c_firmware
- h410c
- h610s_firmware
- hci_bootstrap_os
- h700s_firmware
- h500s_firmware
- h610c_firmware
- hci_compute_node
debian
- debian_linux
gnu
- glibc
CWE
No CWE.