Wind River Support Network

HomeDefectsLIN1023-5012
Fixed

LIN1023-5012 : Security Advisory - glibc - CVE-2024-33599

Created: Apr 25, 2024    Updated: Jun 20, 2024
Resolved Date: Jun 20, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.10
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow.  This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

https://nvd.nist.gov/vuln/detail/CVE-2024-33599

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube