CVE-2024-33601 Vulnerability Details

  /     /     /  

CVE-2024-33601 Metadata Quick Info

CVE Published: 06/05/2024 | CVE Updated: 02/08/2024 | CVE Year: 2024
Source: glibc | Vendor: The GNU C Library | Product: glibc
Status : PUBLISHED

---

CVE-2024-33601 Description

nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon\'s (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-617
CWE Name: CWE-617 Reachable Assertion
Source: The GNU C Library

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-130
CAPEC Description: CAPEC-130 Excessive Allocation


Source: NVD (National Vulnerability Database).