nscd netgroup cache corruption vulnerability

CVE-2024-33602

What is CVE-2024-33602?

The Name Service Cache Daemon (nscd) is affected by a memory corruption vulnerability due to improper handling of NSS callback strings in the netgroup cache functionality. This weakness, introduced in glibc version 2.15, arises when not all strings are correctly stored within the designated buffer during callback operations. As a result, this could lead to unstable behavior and potential exploitation of the affected binary. Ensuring that your systems are updated to versions beyond the vulnerable ones is critical for maintaining security.

References