HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-33602

CVSS 7.4v3.1pub. 2024-05-06upd. 2026-05-12

nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Debian

    OS
    Debian
    10.0

  • Gnu Glibc

    APP
    Gnu
    2.15 – 2.40 (excl.)

  • Netapp Element Software

    APP
    Netapp
    all versions

  • Netapp H300s

    HW
    Netapp
    all versions

  • Netapp H300s Firmware

    OS
    Netapp
    all versions

  • Netapp H410c

    HW
    Netapp
    all versions

  • Netapp H410c Firmware

    OS
    Netapp
    all versions

  • Netapp H410s

    HW
    Netapp
    all versions

  • Netapp H410s Firmware

    OS
    Netapp
    all versions

  • Netapp H500s

    HW
    Netapp
    all versions

  • Netapp H500s Firmware

    OS
    Netapp
    all versions

  • Netapp H700s

    HW
    Netapp
    all versions

  • Netapp H700s Firmware

    OS
    Netapp
    all versions

  • Netapp Hci Bootstrap Os

    OS
    Netapp
    all versions

  • Netapp Solidfire \& Hci Management Node

    APP
    Netapp
    all versions

  • Netapp Solidfire \& Hci Storage Node

    APP
    Netapp
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product

Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki