Loading HuntDB...

GHSA-f4pv-q5f7-2h55

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

nscd: netgroup cache assumes NSS callback uses in-buffer strings

The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory
when the NSS callback does not store all strings in the provided buffer.
The flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

Related CVEs

Key Information

GHSA ID
GHSA-f4pv-q5f7-2h55
Published
May 6, 2024 9:30 PM
Last Modified
July 22, 2024 6:31 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 10, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.