USN-6804-1: GNU C Library vulnerabilities
It was discovered that GNU C Library nscd daemon contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-33599) It was discovered that GNU C Library nscd daemon did not properly check the cache content, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-33600) It was discovered that GNU C Library nscd daemon did not properly validate memory allocation in certain situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-33601) It was discovered that GNU C Library nscd daemon did not properly handle memory allocation, which could lead to memory corruption. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-33602)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6804-1?
The severity of USN-6804-1 is considered high due to the potential for denial of service caused by a stack-based buffer overflow.
How do I fix USN-6804-1?
To fix USN-6804-1, update the nscd package to the recommended version corresponding to your Ubuntu version.
What systems are affected by USN-6804-1?
USN-6804-1 affects multiple versions of Ubuntu including 16.04, 18.04, 20.04, 22.04, 23.10, and 24.04 with specific versions of the nscd package.
What is the potential impact of USN-6804-1?
The potential impact of USN-6804-1 is a system crash leading to a denial of service for the affected system.
Who can exploit the vulnerability in USN-6804-1?
A local attacker can exploit the vulnerability in USN-6804-1 to cause a denial of service.