Description (CNA)
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The GNU C Library / glibc | affected 2.15 before 2.40 |
CWE
CWE-121
References
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005
- https://security.netapp.com/advisory/ntap-20240524-0011/
- https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html
- http://www.openwall.com/lists/oss-security/2024/07/22/5
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
No English description supplied.