Bug 2277205 (CVE-2024-33601) - CVE-2024-33601 glibc: netgroup cache may terminate daemon on memory allocation failure [NEEDINFO]
Summary: CVE-2024-33601 glibc: netgroup cache may terminate daemon on memory allocatio...
Keywords:
Status: NEW
Alias: CVE-2024-33601
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2277207
TreeView+ depends on / blocked
 
Reported: 2024-04-25 17:46 UTC by Robb Gatica
Modified: 2025-01-03 08:27 UTC (History)
42 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:
codonell: needinfo? (rgatica)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2024:2851 0 None None None 2024-05-15 02:09:15 UTC
Red Hat Product Errata RHBA-2024:3360 0 None None None 2024-05-28 08:18:30 UTC
Red Hat Product Errata RHBA-2024:3361 0 None None None 2024-05-28 08:25:12 UTC
Red Hat Product Errata RHBA-2024:3362 0 None None None 2024-05-28 08:29:36 UTC
Red Hat Product Errata RHBA-2024:3363 0 None None None 2024-05-28 08:32:41 UTC
Red Hat Product Errata RHBA-2024:3364 0 None None None 2024-05-28 08:25:02 UTC
Red Hat Product Errata RHBA-2024:3365 0 None None None 2024-05-28 08:32:10 UTC
Red Hat Product Errata RHBA-2024:3366 0 None None None 2024-05-28 08:29:50 UTC
Red Hat Product Errata RHBA-2024:3367 0 None None None 2024-05-28 08:24:02 UTC
Red Hat Product Errata RHBA-2024:3370 0 None None None 2024-05-28 09:57:12 UTC
Red Hat Product Errata RHBA-2024:3371 0 None None None 2024-05-28 08:50:02 UTC
Red Hat Product Errata RHBA-2024:3373 0 None None None 2024-05-28 09:31:14 UTC
Red Hat Product Errata RHBA-2024:3375 0 None None None 2024-05-28 09:28:51 UTC
Red Hat Product Errata RHBA-2024:3376 0 None None None 2024-05-28 09:29:03 UTC
Red Hat Product Errata RHBA-2024:3377 0 None None None 2024-05-28 09:32:45 UTC
Red Hat Product Errata RHBA-2024:3378 0 None None None 2024-05-28 09:56:37 UTC
Red Hat Product Errata RHBA-2024:3379 0 None None None 2024-05-28 09:28:16 UTC
Red Hat Product Errata RHBA-2024:3380 0 None None None 2024-05-28 09:00:19 UTC
Red Hat Product Errata RHBA-2024:3382 0 None None None 2024-05-28 08:59:33 UTC
Red Hat Product Errata RHBA-2024:3383 0 None None None 2024-05-28 09:19:30 UTC
Red Hat Product Errata RHBA-2024:3386 0 None None None 2024-05-28 11:40:06 UTC
Red Hat Product Errata RHBA-2024:3389 0 None None None 2024-05-28 12:17:56 UTC
Red Hat Product Errata RHBA-2024:3390 0 None None None 2024-05-28 12:26:35 UTC
Red Hat Product Errata RHBA-2024:3393 0 None None None 2024-05-28 12:35:56 UTC
Red Hat Product Errata RHBA-2024:3398 0 None None None 2024-05-28 13:00:51 UTC
Red Hat Product Errata RHBA-2024:3413 0 None None None 2024-05-28 13:07:48 UTC
Red Hat Product Errata RHBA-2024:3425 0 None None None 2024-05-28 13:30:00 UTC
Red Hat Product Errata RHBA-2024:3430 0 None None None 2024-05-28 13:14:03 UTC
Red Hat Product Errata RHBA-2024:3436 0 None None None 2024-05-28 13:54:48 UTC
Red Hat Product Errata RHBA-2024:3448 0 None None None 2024-05-29 07:59:28 UTC
Red Hat Product Errata RHBA-2024:3449 0 None None None 2024-05-29 07:59:47 UTC
Red Hat Product Errata RHBA-2024:3450 0 None None None 2024-05-29 08:00:00 UTC
Red Hat Product Errata RHBA-2024:3451 0 None None None 2024-05-29 08:00:16 UTC
Red Hat Product Errata RHBA-2024:3452 0 None None None 2024-05-29 08:00:31 UTC
Red Hat Product Errata RHBA-2024:3453 0 None None None 2024-05-29 08:00:58 UTC
Red Hat Product Errata RHBA-2024:3454 0 None None None 2024-05-29 08:01:20 UTC
Red Hat Product Errata RHBA-2024:3455 0 None None None 2024-05-29 08:01:04 UTC
Red Hat Product Errata RHBA-2024:3456 0 None None None 2024-05-29 07:52:23 UTC
Red Hat Product Errata RHBA-2024:3457 0 None None None 2024-05-29 07:52:35 UTC
Red Hat Product Errata RHBA-2024:3458 0 None None None 2024-05-29 07:52:47 UTC
Red Hat Product Errata RHBA-2024:3459 0 None None None 2024-05-29 07:53:00 UTC
Red Hat Product Errata RHBA-2024:3463 0 None None None 2024-05-29 08:14:55 UTC
Red Hat Product Errata RHBA-2024:3465 0 None None None 2024-05-29 12:56:48 UTC
Red Hat Product Errata RHBA-2024:3468 0 None None None 2024-05-29 14:05:34 UTC
Red Hat Product Errata RHBA-2024:3474 0 None None None 2024-05-29 16:14:02 UTC
Red Hat Product Errata RHBA-2024:3477 0 None None None 2024-05-29 19:10:50 UTC
Red Hat Product Errata RHBA-2024:3505 0 None None None 2024-05-30 13:25:54 UTC
Red Hat Product Errata RHBA-2024:3506 0 None None None 2024-05-30 13:21:13 UTC
Red Hat Product Errata RHBA-2024:3508 0 None None None 2024-05-30 13:28:48 UTC
Red Hat Product Errata RHBA-2024:3509 0 None None None 2024-05-30 13:35:52 UTC
Red Hat Product Errata RHBA-2024:3510 0 None None None 2024-05-30 13:33:34 UTC
Red Hat Product Errata RHBA-2024:3511 0 None None None 2024-05-30 13:39:31 UTC
Red Hat Product Errata RHBA-2024:3531 0 None None None 2024-05-31 16:35:09 UTC
Red Hat Product Errata RHBA-2024:3532 0 None None None 2024-05-31 16:31:13 UTC
Red Hat Product Errata RHBA-2024:3547 0 None None None 2024-06-03 10:45:17 UTC
Red Hat Product Errata RHBA-2024:3548 0 None None None 2024-06-03 11:34:54 UTC
Red Hat Product Errata RHBA-2024:3554 0 None None None 2024-06-03 14:26:32 UTC
Red Hat Product Errata RHBA-2024:3584 0 None None None 2024-06-04 11:22:54 UTC
Red Hat Product Errata RHBA-2024:3615 0 None None None 2024-06-04 18:13:37 UTC
Red Hat Product Errata RHBA-2024:3616 0 None None None 2024-06-04 18:16:08 UTC
Red Hat Product Errata RHBA-2024:3628 0 None None None 2024-06-05 10:05:52 UTC
Red Hat Product Errata RHBA-2024:3645 0 None None None 2024-06-05 21:01:25 UTC
Red Hat Product Errata RHBA-2024:3651 0 None None None 2024-06-05 21:41:00 UTC
Red Hat Product Errata RHBA-2024:3678 0 None None None 2024-06-06 11:09:12 UTC
Red Hat Product Errata RHBA-2024:3703 0 None None None 2024-06-06 14:42:21 UTC
Red Hat Product Errata RHBA-2024:3734 0 None None None 2024-06-10 00:33:13 UTC
Red Hat Product Errata RHBA-2024:3735 0 None None None 2024-06-10 01:01:45 UTC
Red Hat Product Errata RHBA-2024:3853 0 None None None 2024-06-11 22:15:57 UTC
Red Hat Product Errata RHBA-2024:3870 0 None None None 2024-06-12 19:32:05 UTC
Red Hat Product Errata RHBA-2024:3873 0 None None None 2024-06-12 20:43:41 UTC
Red Hat Product Errata RHBA-2024:3942 0 None None None 2024-06-17 07:48:47 UTC
Red Hat Product Errata RHBA-2024:3944 0 None None None 2024-06-17 11:59:28 UTC
Red Hat Product Errata RHBA-2024:3956 0 None None None 2024-06-17 14:22:20 UTC
Red Hat Product Errata RHBA-2024:3966 0 None None None 2024-06-17 19:22:03 UTC
Red Hat Product Errata RHBA-2024:3981 0 None None None 2024-06-18 15:00:16 UTC
Red Hat Product Errata RHBA-2024:3993 0 None None None 2024-06-20 01:34:24 UTC
Red Hat Product Errata RHBA-2024:4021 0 None None None 2024-06-20 12:04:18 UTC
Red Hat Product Errata RHBA-2024:4216 0 None None None 2024-07-02 08:50:41 UTC
Red Hat Product Errata RHSA-2024:2799 0 None None None 2024-05-09 14:48:21 UTC
Red Hat Product Errata RHSA-2024:3309 0 None None None 2024-05-23 06:25:20 UTC
Red Hat Product Errata RHSA-2024:3312 0 None None None 2024-05-23 07:18:54 UTC
Red Hat Product Errata RHSA-2024:3339 0 None None None 2024-05-23 13:20:33 UTC
Red Hat Product Errata RHSA-2024:3344 0 None None None 2024-05-23 18:49:54 UTC
Red Hat Product Errata RHSA-2024:3411 0 None None None 2024-05-28 14:27:50 UTC
Red Hat Product Errata RHSA-2024:3423 0 None None None 2024-05-28 14:06:11 UTC
Red Hat Product Errata RHSA-2024:3464 0 None None None 2024-05-29 08:28:35 UTC
Red Hat Product Errata RHSA-2024:3588 0 None None None 2024-06-04 14:20:29 UTC

Description Robb Gatica 2024-04-25 17:46:33 UTC 
The netgroup cache uses xmalloc/xrealloc and may terminate the process due to a memory allocation failure.

Reference: https://sourceware.org/bugzilla/show_bug.cgi?id=31679
Comment 4 errata-xmlrpc 2024-05-09 14:48:19 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:2799 https://access.redhat.com/errata/RHSA-2024:2799
Comment 5 errata-xmlrpc 2024-05-23 06:25:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2024:3309 https://access.redhat.com/errata/RHSA-2024:3309
Comment 6 errata-xmlrpc 2024-05-23 07:18:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:3312 https://access.redhat.com/errata/RHSA-2024:3312
Comment 7 errata-xmlrpc 2024-05-23 13:20:29 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:3339 https://access.redhat.com/errata/RHSA-2024:3339
Comment 8 errata-xmlrpc 2024-05-23 18:49:49 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:3344 https://access.redhat.com/errata/RHSA-2024:3344
Comment 9 errata-xmlrpc 2024-05-28 14:06:07 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:3423 https://access.redhat.com/errata/RHSA-2024:3423
Comment 10 errata-xmlrpc 2024-05-28 14:27:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:3411 https://access.redhat.com/errata/RHSA-2024:3411
Comment 11 errata-xmlrpc 2024-05-29 08:28:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:3464 https://access.redhat.com/errata/RHSA-2024:3464
Comment 12 errata-xmlrpc 2024-06-04 14:20:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:3588 https://access.redhat.com/errata/RHSA-2024:3588
Note You need to log in before you can comment on or make changes to this bug.