CVE-2024-33600: Debian Linux

Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days.

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Affected products

• Debian Debian Linux: version 10.0 only
• GNU Glibc: from 2.15, before 2.40 (fixed in 2.40)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Bootstrap OS: affected versions not specified

Published 2024-05-06. Last modified 2026-06-17.