CVE catalog

CVE-2024-33602

GNU C Library vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4fixed
Debianglibcbookworm2.36-9+deb12u14fixed
Debianglibcbookworm-security2.36-9+deb12u7fixed
Ubuntuglibcnoble2.36-9+deb12u7fixed
Ubuntuglibcnoble2.39-0ubuntu8.2fixed
Ubuntuglibc-docnoble2.39-0ubuntu8.2fixed
Ubuntuglibc-sourcenoble2.39-0ubuntu8.2fixed
Ubuntulibc-binnoble2.39-0ubuntu8.2fixed
Ubuntulibc-dev-binnoble2.39-0ubuntu8.2fixed
Ubuntulibc-devtoolsnoble2.39-0ubuntu8.2fixed
Ubuntulibc6noble2.39-0ubuntu8.2fixed
Ubuntulibc6-amd64noble2.39-0ubuntu8.2fixed
Ubuntulibc6-devnoble2.39-0ubuntu8.2fixed
Ubuntulibc6-dev-amd64noble2.39-0ubuntu8.2fixed
Ubuntulibc6-dev-i386noble2.39-0ubuntu8.2fixed
Ubuntulibc6-dev-s390noble2.39-0ubuntu8.2fixed
Ubuntulibc6-dev-x32noble2.39-0ubuntu8.2fixed
Ubuntulibc6-i386noble2.39-0ubuntu8.2fixed
Ubuntulibc6-s390noble2.39-0ubuntu8.2fixed
Ubuntulibc6-x32noble2.39-0ubuntu8.2fixed
Ubuntulocalesnoble2.39-0ubuntu8.2fixed
Ubuntulocales-allnoble2.39-0ubuntu8.2fixed
Ubuntunscdnoble2.39-0ubuntu8.2fixed
Ubuntueglibcpro2.17-93ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu1vulnerable
Ubuntueglibcpro2.18-0ubuntu2vulnerable
Ubuntueglibcpro2.18-0ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu5vulnerable
Ubuntueglibcpro2.18-0ubuntu6vulnerable
Ubuntueglibcpro2.18-0ubuntu7vulnerable
Ubuntueglibcpro2.19-0ubuntu2vulnerable
Ubuntueglibcpro2.19-0ubuntu3vulnerable
Ubuntueglibcpro2.19-0ubuntu4vulnerable
Ubuntueglibcpro2.19-0ubuntu5vulnerable
Ubuntueglibcpro2.19-0ubuntu6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.4vulnerable
Ubuntueglibcpro2.19-0ubuntu6.5vulnerable
Ubuntueglibcpro2.19-0ubuntu6.6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.7vulnerable
Ubuntueglibcpro2.19-0ubuntu6.8vulnerable
Ubuntueglibcpro2.19-0ubuntu6.9vulnerable
Ubuntueglibcpro2.19-0ubuntu6.10vulnerable
Ubuntueglibcpro2.19-0ubuntu6.11vulnerable
Ubuntueglibcpro2.19-0ubuntu6.13vulnerable
Ubuntueglibcpro2.19-0ubuntu6.14vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm2vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm4vulnerable
Ubuntuglibcpro2.26-0ubuntu2vulnerable
Ubuntuglibcpro2.26-0ubuntu2.1vulnerable
Ubuntuglibcpro2.27-0ubuntu2vulnerable
Ubuntuglibcpro2.27-0ubuntu3vulnerable
Ubuntuglibcpro2.27-3ubuntu1vulnerable
Ubuntuglibcpro2.27-3ubuntu1.2vulnerable
Ubuntuglibcpro2.27-3ubuntu1.3vulnerable
Ubuntuglibcpro2.27-3ubuntu1.4vulnerable
Ubuntuglibcpro2.27-3ubuntu1.5vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm1vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm2vulnerable
Ubuntuglibcpro2.27-3ubuntu1.6+esm3fixed
Ubuntuglibc20.042.30-0ubuntu2vulnerable
Ubuntuglibc20.042.30-0ubuntu3vulnerable
Ubuntuglibc20.042.31-0ubuntu5vulnerable
Ubuntuglibc20.042.31-0ubuntu6vulnerable
Ubuntuglibc20.042.31-0ubuntu7vulnerable
Ubuntuglibc20.042.31-0ubuntu9vulnerable
Ubuntuglibc20.042.31-0ubuntu9.1vulnerable
Ubuntuglibc20.042.31-0ubuntu9.2vulnerable
Ubuntuglibc20.042.31-0ubuntu9.3vulnerable
Ubuntuglibc20.042.31-0ubuntu9.7vulnerable
Ubuntuglibc20.042.31-0ubuntu9.9vulnerable
Ubuntuglibc20.042.31-0ubuntu9.12vulnerable
Ubuntuglibc20.042.31-0ubuntu9.14vulnerable
Ubuntuglibc20.042.31-0ubuntu9.15vulnerable
Ubuntuglibc20.042.31-0ubuntu9.16fixed
Ubuntuglibc22.042.34-0ubuntu3vulnerable
Ubuntuglibc22.042.35-0ubuntu1vulnerable
Ubuntuglibc22.042.35-0ubuntu3vulnerable
Ubuntuglibc22.042.35-0ubuntu3.1vulnerable
Ubuntuglibc22.042.35-0ubuntu3.3vulnerable
Ubuntuglibc22.042.35-0ubuntu3.4vulnerable
Ubuntuglibc22.042.35-0ubuntu3.5vulnerable
Ubuntuglibc22.042.35-0ubuntu3.6vulnerable
Ubuntuglibc22.042.35-0ubuntu3.7vulnerable
Ubuntuglibc22.042.35-0ubuntu3.8fixed
Ubuntuglibc24.042.38-1ubuntu6vulnerable
Ubuntuglibc24.042.38-3ubuntu1vulnerable
Ubuntuglibc24.042.39-0ubuntu1vulnerable
Ubuntuglibc24.042.39-0ubuntu2vulnerable
Ubuntuglibc24.042.39-0ubuntu6vulnerable
Ubuntuglibc24.042.39-0ubuntu8vulnerable
Ubuntuglibc24.042.39-0ubuntu8.1vulnerable
Ubuntuglibc24.042.39-0ubuntu8.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.37-19not yet assignedNot reportedNot reported
Debianglibcsourceforky2.37-19not yet assignedNot reportedNot reported
Debianglibcsourcetrixie2.37-19not yet assignedNot reportedNot reported
Debianglibcsourcebookworm2.36-9+deb12u7not yet assignedNot reportedNot reported
Ubuntuglibcdebnoble2.36-9+deb12u7Not reportedNot reportedNot reported
Ubuntuglibcdebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntuglibc-docdebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntuglibc-sourcedebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc-bindebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc-dev-bindebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc-devtoolsdebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-amd64debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-devdebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-dev-amd64debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-dev-i386debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-dev-s390debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-dev-x32debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-i386debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-s390debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulibc6-x32debnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulocalesdebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntulocales-alldebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntunscddebnoble2.39-0ubuntu8.2Not reportedNot reportedNot reported
Ubuntuglibcdebpro2.27-3ubuntu1.6+esm3Not reportedUBUNTU-CVE-2024-33602Not reported
Ubuntuglibcdeb20.042.31-0ubuntu9.16Not reportedUBUNTU-CVE-2024-33602Not reported
Ubuntuglibcdeb22.042.35-0ubuntu3.8Not reportedUBUNTU-CVE-2024-33602Not reported
Ubuntuglibcdeb24.042.39-0ubuntu8.2Not reportedUBUNTU-CVE-2024-33602Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]