CVE-2024-33599

CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache

Vendor The Gnu C Library
Product glibc
Weakness CWE-121
Published May 6, 2024
Last update May 12, 2026

CVSS base score

What the vulnerability does

01Description

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Key dates

02Disclosure timeline

May 6, 2024 CVE published
May 12, 2026 Record updated