AZL-40310
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-40310.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-40310
- Upstream
- Published
- 2024-05-06T20:15:11Z
- Modified
- 2026-04-01T05:13:35.104596Z
- Summary
- CVE-2024-33599 affecting package glibc for versions less than 2.35-7
- Details
-
nscd: Stack-based buffer overflow in netgroup cache
If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd.
This vulnerability is only present in the nscd binary.
- References