CyberSecBulletin
CVE-2024-33602NVD status: Modified

glibc: Return of Pointer Value Outside of Expected Range

Published Updated By the CyberSecBulletin desk

CVE-2024-33602 is a high-severity return of pointer value outside of expected range vulnerability in glibc from The GNU C Library, with a CVSS 3.1 base score of 7.4 out of 10. It can be exploited with local access to the system by an unauthenticated attacker, without any action from a user. The record lists version 2.40 as the first without the flaw, so updating glibc to that release or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.4% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update glibc to 2.40 or a later version.
  2. Update glibc to 2.40 or a later version.

Affected products and versions

VendorProductAffected versionsFixed in
The GNU C Libraryglibc2.15 up to, but not including, 2.402.40
GNUglibc2.15 up to, but not including, 2.402.40
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFPV3.1.5 and laterNot stated
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPV3.1.5 and laterNot stated
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFPV3.1.5 and laterNot stated
DebianDebian Linux10.0Not stated
NetAppH300s FirmwareNot specified in the recordNot stated
NetAppH500s FirmwareNot specified in the recordNot stated
NetAppH700s FirmwareNot specified in the recordNot stated
NetAppH410s FirmwareNot specified in the recordNot stated
NetAppH410c FirmwareNot specified in the recordNot stated
NetAppElement SoftwareNot specified in the recordNot stated
NetAppSolidfire & Hci Management NodeNot specified in the recordNot stated
NetAppSolidfire & Hci Storage NodeNot specified in the recordNot stated
NetAppHci Bootstrap OSNot specified in the recordNot stated

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
HighSuccess depends on conditions outside the attacker's control.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by CISA (ADP).

Official description

nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Return of Pointer Value Outside of Expected Range

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

More Return of Pointer Value Outside of Expected Range vulnerabilities (CWE-466)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Third-party and government advisories

Other vulnerabilities in glibc

All glibc vulnerabilities

Recent Return of Pointer Value Outside of Expected Range vulnerabilities

Spotted an error? Tell us.