Bug 2277204 (CVE-2024-33600) - CVE-2024-33600 glibc: null pointer dereferences after failed netgroup cache insertion [NEEDINFO]
Summary: CVE-2024-33600 glibc: null pointer dereferences after failed netgroup cache i...
Keywords:
Status: NEW
Alias: CVE-2024-33600
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2277207
TreeView+ depends on / blocked
 
Reported: 2024-04-25 17:31 UTC by Robb Gatica
Modified: 2025-01-03 08:27 UTC (History)
42 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:
codonell: needinfo? (rgatica)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2024:2851 0 None None None 2024-05-15 02:09:15 UTC
Red Hat Product Errata RHBA-2024:3360 0 None None None 2024-05-28 08:18:29 UTC
Red Hat Product Errata RHBA-2024:3361 0 None None None 2024-05-28 08:25:11 UTC
Red Hat Product Errata RHBA-2024:3362 0 None None None 2024-05-28 08:29:40 UTC
Red Hat Product Errata RHBA-2024:3363 0 None None None 2024-05-28 08:32:41 UTC
Red Hat Product Errata RHBA-2024:3364 0 None None None 2024-05-28 08:25:02 UTC
Red Hat Product Errata RHBA-2024:3365 0 None None None 2024-05-28 08:32:10 UTC
Red Hat Product Errata RHBA-2024:3366 0 None None None 2024-05-28 08:29:50 UTC
Red Hat Product Errata RHBA-2024:3367 0 None None None 2024-05-28 08:23:51 UTC
Red Hat Product Errata RHBA-2024:3370 0 None None None 2024-05-28 09:57:12 UTC
Red Hat Product Errata RHBA-2024:3371 0 None None None 2024-05-28 08:50:03 UTC
Red Hat Product Errata RHBA-2024:3373 0 None None None 2024-05-28 09:31:13 UTC
Red Hat Product Errata RHBA-2024:3375 0 None None None 2024-05-28 09:28:56 UTC
Red Hat Product Errata RHBA-2024:3376 0 None None None 2024-05-28 09:29:01 UTC
Red Hat Product Errata RHBA-2024:3377 0 None None None 2024-05-28 09:32:44 UTC
Red Hat Product Errata RHBA-2024:3378 0 None None None 2024-05-28 09:56:34 UTC
Red Hat Product Errata RHBA-2024:3379 0 None None None 2024-05-28 09:28:18 UTC
Red Hat Product Errata RHBA-2024:3380 0 None None None 2024-05-28 09:00:18 UTC
Red Hat Product Errata RHBA-2024:3382 0 None None None 2024-05-28 08:59:29 UTC
Red Hat Product Errata RHBA-2024:3383 0 None None None 2024-05-28 09:19:29 UTC
Red Hat Product Errata RHBA-2024:3386 0 None None None 2024-05-28 11:40:01 UTC
Red Hat Product Errata RHBA-2024:3389 0 None None None 2024-05-28 12:18:01 UTC
Red Hat Product Errata RHBA-2024:3390 0 None None None 2024-05-28 12:26:42 UTC
Red Hat Product Errata RHBA-2024:3393 0 None None None 2024-05-28 12:35:52 UTC
Red Hat Product Errata RHBA-2024:3398 0 None None None 2024-05-28 13:00:48 UTC
Red Hat Product Errata RHBA-2024:3413 0 None None None 2024-05-28 13:07:48 UTC
Red Hat Product Errata RHBA-2024:3425 0 None None None 2024-05-28 13:29:59 UTC
Red Hat Product Errata RHBA-2024:3430 0 None None None 2024-05-28 13:13:59 UTC
Red Hat Product Errata RHBA-2024:3436 0 None None None 2024-05-28 13:54:44 UTC
Red Hat Product Errata RHBA-2024:3448 0 None None None 2024-05-29 07:59:27 UTC
Red Hat Product Errata RHBA-2024:3449 0 None None None 2024-05-29 07:59:43 UTC
Red Hat Product Errata RHBA-2024:3450 0 None None None 2024-05-29 08:00:00 UTC
Red Hat Product Errata RHBA-2024:3451 0 None None None 2024-05-29 08:00:13 UTC
Red Hat Product Errata RHBA-2024:3452 0 None None None 2024-05-29 08:00:29 UTC
Red Hat Product Errata RHBA-2024:3453 0 None None None 2024-05-29 08:00:58 UTC
Red Hat Product Errata RHBA-2024:3454 0 None None None 2024-05-29 08:01:16 UTC
Red Hat Product Errata RHBA-2024:3455 0 None None None 2024-05-29 08:01:03 UTC
Red Hat Product Errata RHBA-2024:3456 0 None None None 2024-05-29 07:52:18 UTC
Red Hat Product Errata RHBA-2024:3457 0 None None None 2024-05-29 07:52:35 UTC
Red Hat Product Errata RHBA-2024:3458 0 None None None 2024-05-29 07:52:45 UTC
Red Hat Product Errata RHBA-2024:3459 0 None None None 2024-05-29 07:52:58 UTC
Red Hat Product Errata RHBA-2024:3463 0 None None None 2024-05-29 08:14:56 UTC
Red Hat Product Errata RHBA-2024:3465 0 None None None 2024-05-29 12:56:48 UTC
Red Hat Product Errata RHBA-2024:3468 0 None None None 2024-05-29 14:05:31 UTC
Red Hat Product Errata RHBA-2024:3474 0 None None None 2024-05-29 16:14:02 UTC
Red Hat Product Errata RHBA-2024:3477 0 None None None 2024-05-29 19:10:44 UTC
Red Hat Product Errata RHBA-2024:3505 0 None None None 2024-05-30 13:25:53 UTC
Red Hat Product Errata RHBA-2024:3506 0 None None None 2024-05-30 13:21:14 UTC
Red Hat Product Errata RHBA-2024:3508 0 None None None 2024-05-30 13:28:48 UTC
Red Hat Product Errata RHBA-2024:3509 0 None None None 2024-05-30 13:35:57 UTC
Red Hat Product Errata RHBA-2024:3510 0 None None None 2024-05-30 13:33:29 UTC
Red Hat Product Errata RHBA-2024:3511 0 None None None 2024-05-30 13:39:27 UTC
Red Hat Product Errata RHBA-2024:3531 0 None None None 2024-05-31 16:35:09 UTC
Red Hat Product Errata RHBA-2024:3532 0 None None None 2024-05-31 16:31:09 UTC
Red Hat Product Errata RHBA-2024:3547 0 None None None 2024-06-03 10:45:14 UTC
Red Hat Product Errata RHBA-2024:3548 0 None None None 2024-06-03 11:34:54 UTC
Red Hat Product Errata RHBA-2024:3554 0 None None None 2024-06-03 14:26:29 UTC
Red Hat Product Errata RHBA-2024:3584 0 None None None 2024-06-04 11:22:53 UTC
Red Hat Product Errata RHBA-2024:3615 0 None None None 2024-06-04 18:13:38 UTC
Red Hat Product Errata RHBA-2024:3616 0 None None None 2024-06-04 18:16:04 UTC
Red Hat Product Errata RHBA-2024:3628 0 None None None 2024-06-05 10:05:48 UTC
Red Hat Product Errata RHBA-2024:3645 0 None None None 2024-06-05 21:01:25 UTC
Red Hat Product Errata RHBA-2024:3651 0 None None None 2024-06-05 21:41:01 UTC
Red Hat Product Errata RHBA-2024:3678 0 None None None 2024-06-06 11:09:14 UTC
Red Hat Product Errata RHBA-2024:3703 0 None None None 2024-06-06 14:42:18 UTC
Red Hat Product Errata RHBA-2024:3734 0 None None None 2024-06-10 00:33:12 UTC
Red Hat Product Errata RHBA-2024:3735 0 None None None 2024-06-10 01:01:44 UTC
Red Hat Product Errata RHBA-2024:3853 0 None None None 2024-06-11 22:15:57 UTC
Red Hat Product Errata RHBA-2024:3870 0 None None None 2024-06-12 19:32:02 UTC
Red Hat Product Errata RHBA-2024:3873 0 None None None 2024-06-12 20:43:38 UTC
Red Hat Product Errata RHBA-2024:3942 0 None None None 2024-06-17 07:48:46 UTC
Red Hat Product Errata RHBA-2024:3944 0 None None None 2024-06-17 11:59:28 UTC
Red Hat Product Errata RHBA-2024:3956 0 None None None 2024-06-17 14:22:20 UTC
Red Hat Product Errata RHBA-2024:3966 0 None None None 2024-06-17 19:22:04 UTC
Red Hat Product Errata RHBA-2024:3981 0 None None None 2024-06-18 15:00:15 UTC
Red Hat Product Errata RHBA-2024:3993 0 None None None 2024-06-20 01:34:25 UTC
Red Hat Product Errata RHBA-2024:4021 0 None None None 2024-06-20 12:04:20 UTC
Red Hat Product Errata RHBA-2024:4216 0 None None None 2024-07-02 08:50:41 UTC
Red Hat Product Errata RHSA-2024:2799 0 None None None 2024-05-09 14:48:12 UTC
Red Hat Product Errata RHSA-2024:3309 0 None None None 2024-05-23 06:25:11 UTC
Red Hat Product Errata RHSA-2024:3312 0 None None None 2024-05-23 07:18:47 UTC
Red Hat Product Errata RHSA-2024:3339 0 None None None 2024-05-23 13:20:35 UTC
Red Hat Product Errata RHSA-2024:3344 0 None None None 2024-05-23 18:49:52 UTC
Red Hat Product Errata RHSA-2024:3411 0 None None None 2024-05-28 14:27:48 UTC
Red Hat Product Errata RHSA-2024:3423 0 None None None 2024-05-28 14:06:11 UTC
Red Hat Product Errata RHSA-2024:3464 0 None None None 2024-05-29 08:28:28 UTC
Red Hat Product Errata RHSA-2024:3588 0 None None None 2024-06-04 14:20:26 UTC

Description Robb Gatica 2024-04-25 17:31:01 UTC 
After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header.

In addinnetgrX, addgetnetgrentX may have produced a NULL result, indicating a not-found status, but this is not handled in the subsequent code that prepares the record that will be sent out to the client.

Reference: https://sourceware.org/bugzilla/show_bug.cgi?id=31678
Comment 4 errata-xmlrpc 2024-05-09 14:48:09 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:2799 https://access.redhat.com/errata/RHSA-2024:2799
Comment 5 errata-xmlrpc 2024-05-23 06:25:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2024:3309 https://access.redhat.com/errata/RHSA-2024:3309
Comment 6 errata-xmlrpc 2024-05-23 07:18:43 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:3312 https://access.redhat.com/errata/RHSA-2024:3312
Comment 7 errata-xmlrpc 2024-05-23 13:20:31 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:3339 https://access.redhat.com/errata/RHSA-2024:3339
Comment 8 errata-xmlrpc 2024-05-23 18:49:48 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:3344 https://access.redhat.com/errata/RHSA-2024:3344
Comment 9 errata-xmlrpc 2024-05-28 14:06:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:3423 https://access.redhat.com/errata/RHSA-2024:3423
Comment 10 errata-xmlrpc 2024-05-28 14:27:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:3411 https://access.redhat.com/errata/RHSA-2024:3411
Comment 11 errata-xmlrpc 2024-05-29 08:28:24 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:3464 https://access.redhat.com/errata/RHSA-2024:3464
Comment 12 errata-xmlrpc 2024-06-04 14:20:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:3588 https://access.redhat.com/errata/RHSA-2024:3588
Note You need to log in before you can comment on or make changes to this bug.