CVE-2014-9984

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0080%

EPSS Percentile0.24th

Published2017年6月12日

Last Modified2026年5月13日

Vulnerability Description

nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

Affected Platforms (CPE)

📦

Gnu

Glibc

<= 2.19

References & Advisories

🔗 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html

🔗 http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html

🔗 http://seclists.org/fulldisclosure/2019/Jun/18

🔗 http://seclists.org/fulldisclosure/2019/Sep/7

🔗 http://www.securityfocus.com/bid/99071

🔗 https://seclists.org/bugtraq/2019/Jun/14

🔗 https://seclists.org/bugtraq/2019/Sep/7

🔗 https://sourceware.org/bugzilla/show_bug.cgi?id=16695

Vulnerability Description

Affected Platforms (CPE)

Glibc

References & Advisories

関連する脆弱性情報