Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-33600 Details
Description
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 7, 2024Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-082556.html | siemens-SADP | |
| https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | GNU C Library | Mailing ListThird Party Advisory |
| https://security.netapp.com/advisory/ntap-20240524-0013/ | GNU C Library | Third Party Advisory |
| https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 | GNU C Library | Broken Link |
| http://www.openwall.com/lists/oss-security/2024/07/22/5 | GNU C Library | Mailing ListThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html | CVE | Mailing ListThird Party Advisory |
| https://security.netapp.com/advisory/ntap-20240524-0013/ | CVE | Third Party Advisory |
| https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006 | CVE | Broken Link |
| http://www.openwall.com/lists/oss-security/2024/07/22/5 | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | GNU C Library |
Affected Products
| Product | Versions |
|---|---|
| gnu glibc | >= 2.15, < 2.40 |
CPE
Remediation
| |
| debian debian linux | 10.0 |
CPE
Remediation
| |
| netapp active iq unified manager | All versions |
CPE
Remediation
| |
| netapp h300s firmware | All versions |
CPE
Remediation
| |
| netapp h300s | All versions |
CPE
Remediation
| |
| netapp h500s firmware | All versions |
CPE
Remediation
| |
| netapp h500s | All versions |
CPE
Remediation
| |
| netapp h700s firmware | All versions |
CPE
Remediation
| |
| netapp h700s | All versions |
CPE
Remediation
| |
| netapp h410s firmware | All versions |
CPE
Remediation
| |
| netapp h410s | All versions |
CPE
Remediation
| |
| netapp h410c firmware | All versions |
CPE
Remediation
| |
| netapp h410c | All versions |
CPE
Remediation
| |
| netapp h610c firmware | All versions |
CPE
Remediation
| |
| netapp h610c | All versions |
CPE
Remediation
| |
| netapp h610s firmware | All versions |
CPE
Remediation
| |
| netapp h610s | All versions |
CPE
Remediation
| |
| netapp h615c firmware | All versions |
CPE
Remediation
| |
| netapp h615c | All versions |
CPE
Remediation
| |
| netapp hci bootstrap os | All versions |
CPE
Remediation
| |
Change History
13 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | GNU C Library |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | siemens-SADP |
| May 12, 2026 | CVE Modified | siemens-SADP |
| Jun 18, 2025 | Initial Analysis | [email protected] |
| Mar 27, 2025 | CVE Modified | CISA-ADP |
| Feb 13, 2025 | CVE Modified | GNU C Library |
| Nov 21, 2024 | CVE Modified | CVE |
| Jul 22, 2024 | CVE Modified | GNU C Library |
| Jun 30, 2024 | CVE Modified | GNU C Library |
| Jun 10, 2024 | CVE Modified | GNU C Library |
| May 14, 2024 | CVE Modified | GNU C Library |
| May 6, 2024 | New CVE Received | GNU C Library |