Bug 2277206 (CVE-2024-33602) - CVE-2024-33602 glibc: netgroup cache assumes NSS callback uses in-buffer strings [NEEDINFO]
Summary: CVE-2024-33602 glibc: netgroup cache assumes NSS callback uses in-buffer strings
Keywords:
Status: NEW
Alias: CVE-2024-33602
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2277207
TreeView+ depends on / blocked
 
Reported: 2024-04-25 17:49 UTC by Robb Gatica
Modified: 2025-01-03 08:27 UTC (History)
42 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:
codonell: needinfo? (rgatica)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2024:2851 0 None None None 2024-05-15 02:09:16 UTC
Red Hat Product Errata RHBA-2024:3360 0 None None None 2024-05-28 08:18:21 UTC
Red Hat Product Errata RHBA-2024:3361 0 None None None 2024-05-28 08:25:15 UTC
Red Hat Product Errata RHBA-2024:3362 0 None None None 2024-05-28 08:29:36 UTC
Red Hat Product Errata RHBA-2024:3363 0 None None None 2024-05-28 08:32:36 UTC
Red Hat Product Errata RHBA-2024:3364 0 None None None 2024-05-28 08:24:58 UTC
Red Hat Product Errata RHBA-2024:3365 0 None None None 2024-05-28 08:32:05 UTC
Red Hat Product Errata RHBA-2024:3366 0 None None None 2024-05-28 08:29:51 UTC
Red Hat Product Errata RHBA-2024:3367 0 None None None 2024-05-28 08:23:57 UTC
Red Hat Product Errata RHBA-2024:3370 0 None None None 2024-05-28 09:57:08 UTC
Red Hat Product Errata RHBA-2024:3371 0 None None None 2024-05-28 08:49:58 UTC
Red Hat Product Errata RHBA-2024:3373 0 None None None 2024-05-28 09:31:24 UTC
Red Hat Product Errata RHBA-2024:3375 0 None None None 2024-05-28 09:28:51 UTC
Red Hat Product Errata RHBA-2024:3376 0 None None None 2024-05-28 09:29:05 UTC
Red Hat Product Errata RHBA-2024:3377 0 None None None 2024-05-28 09:32:48 UTC
Red Hat Product Errata RHBA-2024:3378 0 None None None 2024-05-28 09:56:38 UTC
Red Hat Product Errata RHBA-2024:3379 0 None None None 2024-05-28 09:28:16 UTC
Red Hat Product Errata RHBA-2024:3380 0 None None None 2024-05-28 09:00:19 UTC
Red Hat Product Errata RHBA-2024:3382 0 None None None 2024-05-28 08:59:23 UTC
Red Hat Product Errata RHBA-2024:3383 0 None None None 2024-05-28 09:19:31 UTC
Red Hat Product Errata RHBA-2024:3386 0 None None None 2024-05-28 11:40:06 UTC
Red Hat Product Errata RHBA-2024:3389 0 None None None 2024-05-28 12:17:55 UTC
Red Hat Product Errata RHBA-2024:3390 0 None None None 2024-05-28 12:26:35 UTC
Red Hat Product Errata RHBA-2024:3393 0 None None None 2024-05-28 12:35:56 UTC
Red Hat Product Errata RHBA-2024:3398 0 None None None 2024-05-28 13:00:51 UTC
Red Hat Product Errata RHBA-2024:3413 0 None None None 2024-05-28 13:07:50 UTC
Red Hat Product Errata RHBA-2024:3425 0 None None None 2024-05-28 13:30:04 UTC
Red Hat Product Errata RHBA-2024:3430 0 None None None 2024-05-28 13:14:04 UTC
Red Hat Product Errata RHBA-2024:3436 0 None None None 2024-05-28 13:54:48 UTC
Red Hat Product Errata RHBA-2024:3448 0 None None None 2024-05-29 07:59:31 UTC
Red Hat Product Errata RHBA-2024:3449 0 None None None 2024-05-29 07:59:47 UTC
Red Hat Product Errata RHBA-2024:3450 0 None None None 2024-05-29 08:00:03 UTC
Red Hat Product Errata RHBA-2024:3451 0 None None None 2024-05-29 08:00:16 UTC
Red Hat Product Errata RHBA-2024:3452 0 None None None 2024-05-29 08:00:32 UTC
Red Hat Product Errata RHBA-2024:3453 0 None None None 2024-05-29 08:00:43 UTC
Red Hat Product Errata RHBA-2024:3454 0 None None None 2024-05-29 08:01:20 UTC
Red Hat Product Errata RHBA-2024:3455 0 None None None 2024-05-29 08:01:06 UTC
Red Hat Product Errata RHBA-2024:3456 0 None None None 2024-05-29 07:52:23 UTC
Red Hat Product Errata RHBA-2024:3457 0 None None None 2024-05-29 07:52:38 UTC
Red Hat Product Errata RHBA-2024:3458 0 None None None 2024-05-29 07:52:50 UTC
Red Hat Product Errata RHBA-2024:3459 0 None None None 2024-05-29 07:53:02 UTC
Red Hat Product Errata RHBA-2024:3463 0 None None None 2024-05-29 08:14:51 UTC
Red Hat Product Errata RHBA-2024:3465 0 None None None 2024-05-29 12:56:48 UTC
Red Hat Product Errata RHBA-2024:3468 0 None None None 2024-05-29 14:05:35 UTC
Red Hat Product Errata RHBA-2024:3474 0 None None None 2024-05-29 16:14:06 UTC
Red Hat Product Errata RHBA-2024:3477 0 None None None 2024-05-29 19:10:54 UTC
Red Hat Product Errata RHBA-2024:3505 0 None None None 2024-05-30 13:25:55 UTC
Red Hat Product Errata RHBA-2024:3506 0 None None None 2024-05-30 13:21:10 UTC
Red Hat Product Errata RHBA-2024:3508 0 None None None 2024-05-30 13:28:49 UTC
Red Hat Product Errata RHBA-2024:3509 0 None None None 2024-05-30 13:35:47 UTC
Red Hat Product Errata RHBA-2024:3510 0 None None None 2024-05-30 13:33:34 UTC
Red Hat Product Errata RHBA-2024:3511 0 None None None 2024-05-30 13:39:23 UTC
Red Hat Product Errata RHBA-2024:3531 0 None None None 2024-05-31 16:35:10 UTC
Red Hat Product Errata RHBA-2024:3532 0 None None None 2024-05-31 16:31:13 UTC
Red Hat Product Errata RHBA-2024:3547 0 None None None 2024-06-03 10:45:17 UTC
Red Hat Product Errata RHBA-2024:3548 0 None None None 2024-06-03 11:34:57 UTC
Red Hat Product Errata RHBA-2024:3554 0 None None None 2024-06-03 14:26:33 UTC
Red Hat Product Errata RHBA-2024:3584 0 None None None 2024-06-04 11:22:59 UTC
Red Hat Product Errata RHBA-2024:3615 0 None None None 2024-06-04 18:13:37 UTC
Red Hat Product Errata RHBA-2024:3616 0 None None None 2024-06-04 18:16:09 UTC
Red Hat Product Errata RHBA-2024:3628 0 None None None 2024-06-05 10:05:52 UTC
Red Hat Product Errata RHBA-2024:3645 0 None None None 2024-06-05 21:01:27 UTC
Red Hat Product Errata RHBA-2024:3651 0 None None None 2024-06-05 21:40:59 UTC
Red Hat Product Errata RHBA-2024:3678 0 None None None 2024-06-06 11:09:12 UTC
Red Hat Product Errata RHBA-2024:3703 0 None None None 2024-06-06 14:42:22 UTC
Red Hat Product Errata RHBA-2024:3734 0 None None None 2024-06-10 00:33:14 UTC
Red Hat Product Errata RHBA-2024:3735 0 None None None 2024-06-10 01:01:48 UTC
Red Hat Product Errata RHBA-2024:3853 0 None None None 2024-06-11 22:15:57 UTC
Red Hat Product Errata RHBA-2024:3870 0 None None None 2024-06-12 19:32:06 UTC
Red Hat Product Errata RHBA-2024:3873 0 None None None 2024-06-12 20:43:42 UTC
Red Hat Product Errata RHBA-2024:3942 0 None None None 2024-06-17 07:48:51 UTC
Red Hat Product Errata RHBA-2024:3944 0 None None None 2024-06-17 11:59:28 UTC
Red Hat Product Errata RHBA-2024:3956 0 None None None 2024-06-17 14:22:24 UTC
Red Hat Product Errata RHBA-2024:3966 0 None None None 2024-06-17 19:22:02 UTC
Red Hat Product Errata RHBA-2024:3981 0 None None None 2024-06-18 15:00:21 UTC
Red Hat Product Errata RHBA-2024:3993 0 None None None 2024-06-20 01:34:24 UTC
Red Hat Product Errata RHBA-2024:4021 0 None None None 2024-06-20 12:04:18 UTC
Red Hat Product Errata RHBA-2024:4216 0 None None None 2024-07-02 08:50:47 UTC
Red Hat Product Errata RHSA-2024:2799 0 None None None 2024-05-09 14:48:18 UTC
Red Hat Product Errata RHSA-2024:3309 0 None None None 2024-05-23 06:25:27 UTC
Red Hat Product Errata RHSA-2024:3312 0 None None None 2024-05-23 07:18:56 UTC
Red Hat Product Errata RHSA-2024:3339 0 None None None 2024-05-23 13:20:28 UTC
Red Hat Product Errata RHSA-2024:3344 0 None None None 2024-05-23 18:50:00 UTC
Red Hat Product Errata RHSA-2024:3411 0 None None None 2024-05-28 14:27:52 UTC
Red Hat Product Errata RHSA-2024:3423 0 None None None 2024-05-28 14:06:07 UTC
Red Hat Product Errata RHSA-2024:3464 0 None None None 2024-05-29 08:28:39 UTC
Red Hat Product Errata RHSA-2024:3588 0 None None None 2024-06-04 14:20:31 UTC

Description Robb Gatica 2024-04-25 17:49:47 UTC 
The buffer-resizing code in addgetnetgrentX assumes that all string pointers point into the supplied buffer.

Reference: https://sourceware.org/bugzilla/show_bug.cgi?id=31680
Comment 4 errata-xmlrpc 2024-05-09 14:48:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:2799 https://access.redhat.com/errata/RHSA-2024:2799
Comment 5 errata-xmlrpc 2024-05-23 06:25:23 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2024:3309 https://access.redhat.com/errata/RHSA-2024:3309
Comment 6 errata-xmlrpc 2024-05-23 07:18:52 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:3312 https://access.redhat.com/errata/RHSA-2024:3312
Comment 7 errata-xmlrpc 2024-05-23 13:20:24 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:3339 https://access.redhat.com/errata/RHSA-2024:3339
Comment 8 errata-xmlrpc 2024-05-23 18:49:56 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:3344 https://access.redhat.com/errata/RHSA-2024:3344
Comment 9 errata-xmlrpc 2024-05-28 14:06:03 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:3423 https://access.redhat.com/errata/RHSA-2024:3423
Comment 10 errata-xmlrpc 2024-05-28 14:27:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:3411 https://access.redhat.com/errata/RHSA-2024:3411
Comment 11 errata-xmlrpc 2024-05-29 08:28:34 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:3464 https://access.redhat.com/errata/RHSA-2024:3464
Comment 12 errata-xmlrpc 2024-06-04 14:20:26 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:3588 https://access.redhat.com/errata/RHSA-2024:3588
Note You need to log in before you can comment on or make changes to this bug.