Red Hat Security AdvisoryRHSA-2024:3588
glibc security update
Released 2024-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-326.el7_9.3, glibc-common-2.17-326.el7_9.3, glibc-devel-2.17-326.el7_9.3 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-326.el7_9.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-326.el7_9.3
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-326.el7_9.3, glibc-2.17-326.el7_9.3.ppc, glibc-common-2.17-326.el7_9.3 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-326.el7_9.3, glibc-static-2.17-326.el7_9.3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-326.el7_9.3, glibc-common-2.17-326.el7_9.3, glibc-devel-2.17-326.el7_9.3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-326.el7_9.3
Fixes 5 records
Priority HIGH 74
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an a…
CVSS 3.1HIGH 7.3· Local · No auth · No interaction · EPSS 0.8833 · Published 2024-04-17 · Partial fix · 2.40 CWE-787
Priority MEDIUM 40
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocati…
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01075 · Published 2024-05-06 · Partial fix · 2.40 CWE-617
Priority LOW 38
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-base…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0131 · Published 2024-05-06 · Partial fix · 2.40 CWE-121
Priority LOW 35
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00403 · Published 2024-05-06 · Partial fix · 2.40 CWE-466
Priority LOW 29
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01216 · Published 2024-05-06 · Partial fix · 2.40 CWE-476
THREATIST.IORead the docs