The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6804-1 advisory.

    It was discovered that GNU C Library nscd daemon contained a stack-based buffer overflow. A local attacker     could use this to cause a denial of service (system crash). (CVE-2024-33599)

    It was discovered that GNU C Library nscd daemon did not properly check the cache content, leading to a     null pointer dereference vulnerability. A local attacker could use this to cause a denial of service     (system crash). (CVE-2024-33600)

    It was discovered that GNU C Library nscd daemon did not properly validate memory allocation in certain     situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause     a denial of service (system crash). (CVE-2024-33601)

    It was discovered that GNU C Library nscd daemon did not properly handle memory allocation, which could     lead to memory corruption. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : GNU C Library vulnerabilities (USN-6804-1)

high Nessus Plugin ID 198244

Version 1.5