SUSE-SU-2024:1977-1: glibc&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2024:1977-1 is a vulnerability in glibc&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 11-06-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for glibc This update for glibc fixes the following issues: - nscd: Release read lock after resetting timeout - nscd: Fix use-after-free in addgetnetgrentX (BZ #23520) - CVE-2024-33599; nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423, BZ #31677) - CVE-2024-33600; nscd: Avoid null pointer crashes after notfound response (bsc#1223424, BZ #31678) - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424, BZ #31678) - CVE-2024-33601, CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (bsc#1223425, BZ #31680) - CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425) - CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- glibc&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 2.26-150000.13.73.1
- glibc&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 2.26-150000.13.73.1
- glibc&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 2.26-150000.13.73.1
1 vendor · 3 products