Bug 2277205 (CVE-2024-33601) - CVE-2024-33601 glibc: netgroup cache may terminate daemon on memory allocation failure
Summary: CVE-2024-33601 glibc: netgroup cache may terminate daemon on memory allocatio...
Keywords:
Status: NEW
Alias: CVE-2024-33601
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2277207
TreeView+ depends on / blocked
 
Reported: 2024-04-25 17:46 UTC by Robb Gatica
Modified: 2024-05-28 14:27 UTC (History)
43 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the glibc netgroup cache. The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2024:2851 0 None None None 2024-05-15 02:09:15 UTC
Red Hat Product Errata RHBA-2024:3360 0 None None None 2024-05-28 08:18:30 UTC
Red Hat Product Errata RHBA-2024:3361 0 None None None 2024-05-28 08:25:12 UTC
Red Hat Product Errata RHBA-2024:3362 0 None None None 2024-05-28 08:29:36 UTC
Red Hat Product Errata RHBA-2024:3363 0 None None None 2024-05-28 08:32:41 UTC
Red Hat Product Errata RHBA-2024:3364 0 None None None 2024-05-28 08:25:02 UTC
Red Hat Product Errata RHBA-2024:3365 0 None None None 2024-05-28 08:32:10 UTC
Red Hat Product Errata RHBA-2024:3366 0 None None None 2024-05-28 08:29:50 UTC
Red Hat Product Errata RHBA-2024:3367 0 None None None 2024-05-28 08:24:02 UTC
Red Hat Product Errata RHBA-2024:3370 0 None None None 2024-05-28 09:57:12 UTC
Red Hat Product Errata RHBA-2024:3371 0 None None None 2024-05-28 08:50:02 UTC
Red Hat Product Errata RHBA-2024:3373 0 None None None 2024-05-28 09:31:14 UTC
Red Hat Product Errata RHBA-2024:3375 0 None None None 2024-05-28 09:28:51 UTC
Red Hat Product Errata RHBA-2024:3376 0 None None None 2024-05-28 09:29:03 UTC
Red Hat Product Errata RHBA-2024:3377 0 None None None 2024-05-28 09:32:45 UTC
Red Hat Product Errata RHBA-2024:3378 0 None None None 2024-05-28 09:56:37 UTC
Red Hat Product Errata RHBA-2024:3379 0 None None None 2024-05-28 09:28:16 UTC
Red Hat Product Errata RHBA-2024:3380 0 None None None 2024-05-28 09:00:19 UTC
Red Hat Product Errata RHBA-2024:3382 0 None None None 2024-05-28 08:59:33 UTC
Red Hat Product Errata RHBA-2024:3383 0 None None None 2024-05-28 09:19:30 UTC
Red Hat Product Errata RHBA-2024:3386 0 None None None 2024-05-28 11:40:06 UTC
Red Hat Product Errata RHBA-2024:3389 0 None None None 2024-05-28 12:17:56 UTC
Red Hat Product Errata RHBA-2024:3390 0 None None None 2024-05-28 12:26:35 UTC
Red Hat Product Errata RHBA-2024:3393 0 None None None 2024-05-28 12:35:56 UTC
Red Hat Product Errata RHBA-2024:3398 0 None None None 2024-05-28 13:00:51 UTC
Red Hat Product Errata RHBA-2024:3413 0 None None None 2024-05-28 13:07:48 UTC
Red Hat Product Errata RHBA-2024:3425 0 None None None 2024-05-28 13:30:00 UTC
Red Hat Product Errata RHBA-2024:3430 0 None None None 2024-05-28 13:14:03 UTC
Red Hat Product Errata RHBA-2024:3436 0 None None None 2024-05-28 13:54:48 UTC
Red Hat Product Errata RHSA-2024:2799 0 None None None 2024-05-09 14:48:21 UTC
Red Hat Product Errata RHSA-2024:3309 0 None None None 2024-05-23 06:25:20 UTC
Red Hat Product Errata RHSA-2024:3312 0 None None None 2024-05-23 07:18:54 UTC
Red Hat Product Errata RHSA-2024:3339 0 None None None 2024-05-23 13:20:33 UTC
Red Hat Product Errata RHSA-2024:3344 0 None None None 2024-05-23 18:49:54 UTC
Red Hat Product Errata RHSA-2024:3411 0 None None None 2024-05-28 14:27:50 UTC
Red Hat Product Errata RHSA-2024:3423 0 None None None 2024-05-28 14:06:11 UTC

Description Robb Gatica 2024-04-25 17:46:33 UTC 
The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.

Reference: https://sourceware.org/bugzilla/show_bug.cgi?id=31679
Comment 4 errata-xmlrpc 2024-05-09 14:48:19 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:2799 https://access.redhat.com/errata/RHSA-2024:2799
Comment 5 errata-xmlrpc 2024-05-23 06:25:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2024:3309 https://access.redhat.com/errata/RHSA-2024:3309
Comment 6 errata-xmlrpc 2024-05-23 07:18:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:3312 https://access.redhat.com/errata/RHSA-2024:3312
Comment 7 errata-xmlrpc 2024-05-23 13:20:29 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:3339 https://access.redhat.com/errata/RHSA-2024:3339
Comment 8 errata-xmlrpc 2024-05-23 18:49:49 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:3344 https://access.redhat.com/errata/RHSA-2024:3344
Comment 9 errata-xmlrpc 2024-05-28 14:06:07 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:3423 https://access.redhat.com/errata/RHSA-2024:3423
Comment 10 errata-xmlrpc 2024-05-28 14:27:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:3411 https://access.redhat.com/errata/RHSA-2024:3411
Note You need to log in before you can comment on or make changes to this bug.