Red Hat Security AdvisoryRHSA-2024:3344
glibc security update
Released 2024-05-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-251.el8_10.2, glibc-utils-2.28-251.el8_10.2
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-251.el8_10.2, glibc-all-langpacks-2.28-251.el8_10.2, glibc-common-2.28-251.el8_10.2 +47
- Red Hat Enterprise Linux CRB (v. 8) glibc-benchtests-2.28-251.el8_10.2, glibc-nss-devel-2.28-251.el8_10.2, glibc-static-2.28-251.el8_10.2 +1
Fixes 4 records
Priority MEDIUM 40
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocati…
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01075 · Published 2024-05-06 · Partial fix · 2.40 CWE-617
Priority LOW 38
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-base…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0131 · Published 2024-05-06 · Partial fix · 2.40 CWE-121
Priority LOW 35
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00403 · Published 2024-05-06 · Partial fix · 2.40 CWE-466
Priority LOW 29
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01216 · Published 2024-05-06 · Partial fix · 2.40 CWE-476