UBUNTU-CVE-2024-33601

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2024-33601

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-33601.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-33601

Related

Published

2024-05-06T20:15:00Z

Modified

2024-05-06T20:15:00Z

Summary

[none]

Details

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

References

Affected packages

Ubuntu:Pro:14.04:LTS / eglibc

Package

Name: eglibc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.17-93ubuntu4

2.18-0ubuntu1

2.18-0ubuntu2

2.18-0ubuntu4

2.18-0ubuntu5

2.18-0ubuntu6

2.18-0ubuntu7

2.19-0ubuntu2

2.19-0ubuntu3

2.19-0ubuntu4

2.19-0ubuntu5

2.19-0ubuntu6

2.19-0ubuntu6.1

2.19-0ubuntu6.3

2.19-0ubuntu6.4

2.19-0ubuntu6.5

2.19-0ubuntu6.6

2.19-0ubuntu6.7

2.19-0ubuntu6.8

2.19-0ubuntu6.9

2.19-0ubuntu6.10

2.19-0ubuntu6.11

2.19-0ubuntu6.13

2.19-0ubuntu6.14

2.19-0ubuntu6.15

2.19-0ubuntu6.15+esm1

2.19-0ubuntu6.15+esm2

2.19-0ubuntu6.15+esm3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.23-0ubuntu11.3+esm7?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.23-0ubuntu11.3+esm7

Affected versions

2.*

2.21-0ubuntu4

2.21-0ubuntu5

2.21-0ubuntu6

2.23-0ubuntu1

2.23-0ubuntu2

2.23-0ubuntu3

2.23-0ubuntu4

2.23-0ubuntu5

2.23-0ubuntu6

2.23-0ubuntu7

2.23-0ubuntu9

2.23-0ubuntu10

2.23-0ubuntu11

2.23-0ubuntu11.2

2.23-0ubuntu11.3

2.23-0ubuntu11.3+esm1

2.23-0ubuntu11.3+esm2

2.23-0ubuntu11.3+esm3

2.23-0ubuntu11.3+esm5

2.23-0ubuntu11.3+esm6

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.23-0ubuntu11.3+esm7",
            "libc6-dev": "2.23-0ubuntu11.3+esm7",
            "libc6-udeb-dbgsym": "2.23-0ubuntu11.3+esm7",
            "multiarch-support": "2.23-0ubuntu11.3+esm7",
            "libc6-dev-s390": "2.23-0ubuntu11.3+esm7",
            "libc6-dev-i386": "2.23-0ubuntu11.3+esm7",
            "locales-all": "2.23-0ubuntu11.3+esm7",
            "libc6-amd64-dbgsym": "2.23-0ubuntu11.3+esm7",
            "glibc-source": "2.23-0ubuntu11.3+esm7",
            "libc6-dev-amd64": "2.23-0ubuntu11.3+esm7",
            "libc6-pic": "2.23-0ubuntu11.3+esm7",
            "nscd-dbgsym": "2.23-0ubuntu11.3+esm7",
            "nscd": "2.23-0ubuntu11.3+esm7",
            "glibc-doc": "2.23-0ubuntu11.3+esm7",
            "libc6-armel": "2.23-0ubuntu11.3+esm7",
            "libc6-dbg": "2.23-0ubuntu11.3+esm7",
            "libc6": "2.23-0ubuntu11.3+esm7",
            "libc6-armel-dbgsym": "2.23-0ubuntu11.3+esm7",
            "libc-bin": "2.23-0ubuntu11.3+esm7",
            "libc6-i386": "2.23-0ubuntu11.3+esm7",
            "libc6-udeb": "2.23-0ubuntu11.3+esm7",
            "libc6-dev-x32": "2.23-0ubuntu11.3+esm7",
            "libc-bin-dbgsym": "2.23-0ubuntu11.3+esm7",
            "libc-dev-bin": "2.23-0ubuntu11.3+esm7",
            "libc6-amd64": "2.23-0ubuntu11.3+esm7",
            "libc6-x32": "2.23-0ubuntu11.3+esm7",
            "libc6-dbgsym": "2.23-0ubuntu11.3+esm7",
            "libc6-s390": "2.23-0ubuntu11.3+esm7",
            "libc6-dev-armel": "2.23-0ubuntu11.3+esm7",
            "libc6-i386-dbgsym": "2.23-0ubuntu11.3+esm7",
            "locales": "2.23-0ubuntu11.3+esm7",
            "libc-dev-bin-dbgsym": "2.23-0ubuntu11.3+esm7",
            "libc6-x32-dbgsym": "2.23-0ubuntu11.3+esm7"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.27-3ubuntu1.6+esm3?arch=src?distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.27-3ubuntu1.6+esm3

Affected versions

2.*

2.26-0ubuntu2

2.26-0ubuntu2.1

2.27-0ubuntu2

2.27-0ubuntu3

2.27-3ubuntu1

2.27-3ubuntu1.2

2.27-3ubuntu1.3

2.27-3ubuntu1.4

2.27-3ubuntu1.5

2.27-3ubuntu1.6

2.27-3ubuntu1.6+esm1

2.27-3ubuntu1.6+esm2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.27-3ubuntu1.6+esm3",
            "libc6-dev": "2.27-3ubuntu1.6+esm3",
            "multiarch-support": "2.27-3ubuntu1.6+esm3",
            "libc6-dev-s390": "2.27-3ubuntu1.6+esm3",
            "libc6-dev-i386": "2.27-3ubuntu1.6+esm3",
            "locales-all": "2.27-3ubuntu1.6+esm3",
            "libc6-amd64-dbgsym": "2.27-3ubuntu1.6+esm3",
            "libc6-pic": "2.27-3ubuntu1.6+esm3",
            "glibc-source": "2.27-3ubuntu1.6+esm3",
            "libc6-dev-amd64": "2.27-3ubuntu1.6+esm3",
            "nscd-dbgsym": "2.27-3ubuntu1.6+esm3",
            "nscd": "2.27-3ubuntu1.6+esm3",
            "glibc-doc": "2.27-3ubuntu1.6+esm3",
            "libc6-armel": "2.27-3ubuntu1.6+esm3",
            "libc6-armel-dbgsym": "2.27-3ubuntu1.6+esm3",
            "libc6": "2.27-3ubuntu1.6+esm3",
            "libc6-dbg": "2.27-3ubuntu1.6+esm3",
            "libc-bin": "2.27-3ubuntu1.6+esm3",
            "libc6-i386": "2.27-3ubuntu1.6+esm3",
            "libc6-udeb": "2.27-3ubuntu1.6+esm3",
            "libc6-dev-x32": "2.27-3ubuntu1.6+esm3",
            "libc-bin-dbgsym": "2.27-3ubuntu1.6+esm3",
            "libc-dev-bin": "2.27-3ubuntu1.6+esm3",
            "libc6-amd64": "2.27-3ubuntu1.6+esm3",
            "libc6-x32": "2.27-3ubuntu1.6+esm3",
            "libc6-s390": "2.27-3ubuntu1.6+esm3",
            "libc6-dev-armel": "2.27-3ubuntu1.6+esm3",
            "libc6-i386-dbgsym": "2.27-3ubuntu1.6+esm3",
            "locales": "2.27-3ubuntu1.6+esm3",
            "libc6-lse": "2.27-3ubuntu1.6+esm3",
            "libc-dev-bin-dbgsym": "2.27-3ubuntu1.6+esm3",
            "libc6-x32-dbgsym": "2.27-3ubuntu1.6+esm3"
        }
    ]
}

Ubuntu:20.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.31-0ubuntu9.16?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.31-0ubuntu9.16

Affected versions

2.*

2.30-0ubuntu2

2.30-0ubuntu3

2.31-0ubuntu5

2.31-0ubuntu6

2.31-0ubuntu7

2.31-0ubuntu9

2.31-0ubuntu9.1

2.31-0ubuntu9.2

2.31-0ubuntu9.3

2.31-0ubuntu9.7

2.31-0ubuntu9.9

2.31-0ubuntu9.12

2.31-0ubuntu9.14

2.31-0ubuntu9.15

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.31-0ubuntu9.16",
            "libc6-dev": "2.31-0ubuntu9.16",
            "libc6-dev-s390": "2.31-0ubuntu9.16",
            "libc6-dev-i386": "2.31-0ubuntu9.16",
            "locales-all": "2.31-0ubuntu9.16",
            "libc6-amd64-dbgsym": "2.31-0ubuntu9.16",
            "libc6-pic": "2.31-0ubuntu9.16",
            "glibc-source": "2.31-0ubuntu9.16",
            "libc6-dev-amd64": "2.31-0ubuntu9.16",
            "nscd-dbgsym": "2.31-0ubuntu9.16",
            "nscd": "2.31-0ubuntu9.16",
            "glibc-doc": "2.31-0ubuntu9.16",
            "libc6-armel": "2.31-0ubuntu9.16",
            "libc6-armel-dbgsym": "2.31-0ubuntu9.16",
            "libc6": "2.31-0ubuntu9.16",
            "libc6-dbg": "2.31-0ubuntu9.16",
            "libc-bin": "2.31-0ubuntu9.16",
            "libc6-i386": "2.31-0ubuntu9.16",
            "libc6-udeb": "2.31-0ubuntu9.16",
            "libc6-dev-x32": "2.31-0ubuntu9.16",
            "libc-bin-dbgsym": "2.31-0ubuntu9.16",
            "libc-dev-bin": "2.31-0ubuntu9.16",
            "libc6-amd64": "2.31-0ubuntu9.16",
            "libc6-x32": "2.31-0ubuntu9.16",
            "libc6-prof": "2.31-0ubuntu9.16",
            "libc6-s390": "2.31-0ubuntu9.16",
            "libc6-dev-armel": "2.31-0ubuntu9.16",
            "libc6-i386-dbgsym": "2.31-0ubuntu9.16",
            "locales": "2.31-0ubuntu9.16",
            "libc6-lse": "2.31-0ubuntu9.16",
            "libc-dev-bin-dbgsym": "2.31-0ubuntu9.16",
            "libc6-x32-dbgsym": "2.31-0ubuntu9.16"
        }
    ]
}

Ubuntu:22.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.35-0ubuntu3.8?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.35-0ubuntu3.8

Affected versions

2.*

2.34-0ubuntu3

2.35-0ubuntu1

2.35-0ubuntu3

2.35-0ubuntu3.1

2.35-0ubuntu3.3

2.35-0ubuntu3.4

2.35-0ubuntu3.5

2.35-0ubuntu3.6

2.35-0ubuntu3.7

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.35-0ubuntu3.8",
            "libc6-dev": "2.35-0ubuntu3.8",
            "libc6-dev-s390": "2.35-0ubuntu3.8",
            "libc6-dev-i386": "2.35-0ubuntu3.8",
            "locales-all": "2.35-0ubuntu3.8",
            "libc6-amd64-dbgsym": "2.35-0ubuntu3.8",
            "glibc-source": "2.35-0ubuntu3.8",
            "libc6-dev-amd64": "2.35-0ubuntu3.8",
            "nscd-dbgsym": "2.35-0ubuntu3.8",
            "nscd": "2.35-0ubuntu3.8",
            "glibc-doc": "2.35-0ubuntu3.8",
            "libc6-dbg": "2.35-0ubuntu3.8",
            "libc6": "2.35-0ubuntu3.8",
            "libc-bin": "2.35-0ubuntu3.8",
            "libc6-i386": "2.35-0ubuntu3.8",
            "libc6-dev-x32": "2.35-0ubuntu3.8",
            "libc-bin-dbgsym": "2.35-0ubuntu3.8",
            "libc-dev-bin": "2.35-0ubuntu3.8",
            "libc6-amd64": "2.35-0ubuntu3.8",
            "libc6-x32": "2.35-0ubuntu3.8",
            "libc6-prof": "2.35-0ubuntu3.8",
            "libc-devtools": "2.35-0ubuntu3.8",
            "libc-devtools-dbgsym": "2.35-0ubuntu3.8",
            "libc6-s390": "2.35-0ubuntu3.8",
            "libc6-i386-dbgsym": "2.35-0ubuntu3.8",
            "locales": "2.35-0ubuntu3.8",
            "libc-dev-bin-dbgsym": "2.35-0ubuntu3.8",
            "libc6-x32-dbgsym": "2.35-0ubuntu3.8"
        }
    ]
}

Ubuntu:24.04:LTS / glibc

Package

Name: glibc
Purl: pkg:deb/ubuntu/glibc@2.39-0ubuntu8.2?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.39-0ubuntu8.2

Affected versions

2.*

2.38-1ubuntu6

2.38-3ubuntu1

2.39-0ubuntu1

2.39-0ubuntu2

2.39-0ubuntu6

2.39-0ubuntu8

2.39-0ubuntu8.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libc6-s390-dbgsym": "2.39-0ubuntu8.2",
            "libc6-dev": "2.39-0ubuntu8.2",
            "libc6-dev-s390": "2.39-0ubuntu8.2",
            "libc6-dev-i386": "2.39-0ubuntu8.2",
            "locales-all": "2.39-0ubuntu8.2",
            "libc6-amd64-dbgsym": "2.39-0ubuntu8.2",
            "glibc-source": "2.39-0ubuntu8.2",
            "libc6-dev-amd64": "2.39-0ubuntu8.2",
            "nscd-dbgsym": "2.39-0ubuntu8.2",
            "nscd": "2.39-0ubuntu8.2",
            "glibc-doc": "2.39-0ubuntu8.2",
            "libc6-dbg": "2.39-0ubuntu8.2",
            "libc6": "2.39-0ubuntu8.2",
            "libc-bin": "2.39-0ubuntu8.2",
            "libc6-i386": "2.39-0ubuntu8.2",
            "libc6-dev-x32": "2.39-0ubuntu8.2",
            "libc-bin-dbgsym": "2.39-0ubuntu8.2",
            "libc-dev-bin": "2.39-0ubuntu8.2",
            "libc6-amd64": "2.39-0ubuntu8.2",
            "libc6-x32": "2.39-0ubuntu8.2",
            "libc-devtools": "2.39-0ubuntu8.2",
            "libc-devtools-dbgsym": "2.39-0ubuntu8.2",
            "libc6-s390": "2.39-0ubuntu8.2",
            "libc6-i386-dbgsym": "2.39-0ubuntu8.2",
            "libc6-dev-dbgsym": "2.39-0ubuntu8.2",
            "locales": "2.39-0ubuntu8.2",
            "libc-dev-bin-dbgsym": "2.39-0ubuntu8.2",
            "libc6-x32-dbgsym": "2.39-0ubuntu8.2"
        }
    ]
}