CVE-2024-33599: Debian Linux

High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days.

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Affected products

• Debian Debian Linux: version 10.0 only
• GNU Glibc: from 2.15, before 2.40 (fixed in 2.40)
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified

Published 2024-05-06. Last modified 2026-06-17.