Updated: 2024-11-23 02:57:36.242267
Description:
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
| Links | NIST | CIRCL | RHEL | Ubuntu |
| Severity | Score | |
|---|---|---|
| CVSS Version 2.x | LOW | 1.9 |
| CVSS Version 3.x | LOW | 2.5 |
| OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
|---|---|---|---|---|---|---|---|---|
| CentOS 7 ELS | glibc | 2.17 | 2.5 | LOW | Released | CLSA-2024:1720027216 | 2024-07-19 04:50:22 | |
| CentOS 8.4 ELS | glibc | 2.28 | 2.5 | LOW | Released | CLSA-2022:1643727522 | 2022-02-01 14:46:36 | |
| CentOS 8.5 ELS | glibc | 2.28 | 2.5 | LOW | Not Vulnerable | 2022-02-11 05:28:02 |