CVE-2014-9984: Buffer Overflow
Last updated 24 July 2024
Other sources
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9984?
CVE-2014-9984 has a medium severity rating due to the potential for denial of service and unauthorized code execution.
How do I fix CVE-2014-9984?
To fix CVE-2014-9984, upgrade the glibc package to version 2.20 or higher.
What software is affected by CVE-2014-9984?
CVE-2014-9984 affects glibc versions before 2.20 and any software relying on this library.
Can CVE-2014-9984 lead to system vulnerabilities?
Yes, CVE-2014-9984 can lead to system vulnerabilities by allowing a potential crash of the nscd daemon or executing arbitrary code.
Is CVE-2014-9984 related to any known exploits?
CVE-2014-9984 does not have any widely reported exploits, but it poses risks that should be mitigated.