Red Hat Security AdvisoryRHSA-2024:3309
glibc security update
Released 2024-05-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux AppStream E4S (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux AppStream TUS (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
Fixes 5 records
Priority HIGH 74
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an a…
CVSS 3.1HIGH 7.3· Local · No auth · No interaction · EPSS 0.8833 · Published 2024-04-17 · Partial fix · 2.40 CWE-787
Priority MEDIUM 40
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocati…
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01075 · Published 2024-05-06 · Partial fix · 2.40 CWE-617
Priority LOW 38
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-base…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0131 · Published 2024-05-06 · Partial fix · 2.40 CWE-121
Priority LOW 35
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00403 · Published 2024-05-06 · Partial fix · 2.40 CWE-466
Priority LOW 29
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01216 · Published 2024-05-06 · Partial fix · 2.40 CWE-476
THREATIST.IORead the docs