CVE-2024-33601

Katalog CVE

CVSS 7.3 · High EPSS 1,1%

Kerentanan Reachable Assertion pada gnu glibc, debian linux +9 lainnya. Skor CVSS 3.1 7.3 (High) menurut CISA ADP.

Deskripsi (NVD)

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Rincian

Terbit di NVD

6 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2024/07/22/5 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20240524-0014/ advisory pihak ketiga
• https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007 broken link
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html