CVE-2024-33601

CVE Details

Release Date:	2024-04-24
Impact:	Low	What is this?

Description

nscd: netgroup cache may terminate daemon on memory allocation failure\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients. The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\nThis vulnerability is only present in the nscd binary.

See more information about CVE-2024-33601 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	4.0
Vector String:	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Version:	3.1
Attack Vector:	Local
Attack Complexity:	Low
Privileges Required:	None
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Low

Errata information

Platform	Errata	Release Date
Oracle Linux version 7 (glibc)	ELSA-2024-12442	2024-06-18
Oracle Linux version 7 (glibc)	ELSA-2024-12444	2024-06-19
Oracle Linux version 7 (glibc)	ELSA-2024-3588	2024-06-05
Oracle Linux version 8 (glibc)	ELSA-2024-12440	2024-06-17
Oracle Linux version 8 (glibc)	ELSA-2024-3344	2024-05-29
Oracle Linux version 9 (glibc)	ELSA-2024-12472	2024-07-03
Oracle Linux version 9 (glibc)	ELSA-2024-3339	2024-05-29