CVE-2024-33599CWE-121

nscd: Stack-based buffer overflow in netgroup cache

High · published May 6, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted

by client requests then a subsequent client request for netgroup data

may result in a stack-based buffer overflow. This flaw was introduced

in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01310 · 70.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-05-06T19:21Z
EPSS history
Timeline
  • 06 MAY 19:21Z
    nscd: Stack-based buffer overflow in netgroup cache
    cvelistv5