Wind River Support Network

HomeDefectsLIN1023-5014

Fixed

LIN1023-5014 : Security Advisory - glibc - CVE-2024-33601

Created: Apr 25, 2024 Updated: Jun 20, 2024

Resolved Date: Jun 20, 2024

Found In Version: 10.23.30.1

Fix Version: 10.23.30.10

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

nscd: netgroup cache may terminate daemon on memory allocation failure

The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or
xrealloc and these functions may terminate the process due to a memory
allocation failure resulting in a denial of service to the clients.  The
flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

https://nvd.nist.gov/vuln/detail/CVE-2024-33601

CVEs

CVE-2024-33601