Wind River Support Network

HomeDefectsLIN1021-8413
Fixed

LIN1021-8413 : Security Advisory - glibc - CVE-2024-33600

Created: Apr 25, 2024    Updated: Jan 28, 2025
Resolved Date: Jan 27, 2025
Found In Version: 10.21.20.1
Fix Version: 10.21.20.24
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

nscd: Null pointer crashes after notfound response

If the Name Service Cache Daemon's (nscd) cache fails to add a not-found
netgroup response to the cache, the client request can result in a null
pointer dereference.  This flaw was introduced in glibc 2.15 when the
cache was added to nscd.

This vulnerability is only present in the nscd binary.

https://nvd.nist.gov/vuln/detail/CVE-2024-33600

CVEs


Live chat
Online