CyberSec.Space Logo
Back to CVE Browser

CVE-2014-9984

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0080%
EPSS Percentile0.24th
PublishedJun 12, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

Affected Platforms (CPE)

📦
Gnu

Glibc

<= 2.19

References & Advisories

🔗 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
🔗 http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
🔗 http://seclists.org/fulldisclosure/2019/Jun/18
🔗 http://seclists.org/fulldisclosure/2019/Sep/7
🔗 http://www.securityfocus.com/bid/99071
🔗 https://seclists.org/bugtraq/2019/Jun/14
🔗 https://seclists.org/bugtraq/2019/Sep/7
🔗 https://sourceware.org/bugzilla/show_bug.cgi?id=16695

Related Vulnerabilities

CVE-2015-023510.0

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows con...

CVE-2019-142719.8

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility...

CVE-2019-91699.8

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via...

CVE-2021-277089.8

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu...