SUSE-SU-2024:1895-2

CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423)
CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424)
CVE-2024-33600: Do not send missing not-found response in addgetnetgrentX in nscd (bsc#1223424)
CVE-2024-33601, CVE-2024-33602: Fixed use of two buffers in addgetnetgrentX ( bsc#1223425)
CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)
Avoid creating userspace live patching prologue for _start routine (bsc#1221940)

References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / glibc

Package

Name: glibc
Purl: pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.31-150300.83.1

Ecosystem specific

{
    "binaries": [
        {
            "glibc-locale": "2.31-150300.83.1",
            "glibc-devel": "2.31-150300.83.1",
            "glibc-locale-base": "2.31-150300.83.1",
            "glibc": "2.31-150300.83.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:1895-2.json"