Loading vulnerability…
Null Pointer Dereference in glibc nscd Netgroup Caching
CVE-2024-33600 is a null pointer dereference vulnerability in the GNU C Library Name Service Cache Daemon (nscd). If insertion of a not-found netgroup response into the cache fails, processing the client request can dereference a null pointer and crash the daemon. The flaw was introduced in glibc 2.15 with the addition of netgroup caching and is confined to the nscd binary, rather than applications merely linked against glibc.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A local attacker may cause denial of service by crashing nscd, interrupting its name-service caching functionality. Applications relying on the daemon may experience service disruption. Arbitrary code execution, privilege escalation, and confidentiality impacts are not established for this vulnerability.
If you can’t patch tonight, do this now.
If immediate patching is not possible, consider disabling nscd where operationally acceptable. This removes the vulnerable daemon from use but may affect name-service caching and dependent workloads.
Patch, then assume compromise.
Install vendor-provided glibc/nscd updates that address CVE-2024-33600. For Ubuntu systems covered by USN-6804-1, update to package version 2.23-0ubuntu11.3+esm7 or later. For affected Red Hat deployments, apply the relevant security updates, including RHSA-2024:3344 or RHSA-2024:3411 as applicable. Replace affected container images with updated vendor images and rebuild dependent images.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
110 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.