cve/2024/CVE-2024-33601.md

### [CVE-2024-33601](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601)
![](https://img.shields.io/static/v1?label=Product&message=glibc&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.15%3C%202.40%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-617%20Reachable%20Assertion&color=brighgreen)

### Description

nscd: netgroup cache may terminate daemon on memory allocation failureThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc orxrealloc and these functions may terminate the process due to a memoryallocation failure resulting in a denial of service to the clients.  Theflaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability is only present in the nscd binary.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/GrigGM/05-virt-04-docker-hw
- https://github.com/smartcow99/docker-security-check-using-trivy
- https://github.com/testing-felickz/docker-scout-demo