nscd

About this tag
The nscd (Name Service Cache Daemon) is a component of the GNU C Library that caches name service lookups to reduce latency and load on upstream servers. Discussions on WindowsForum.com cover multiple CVEs affecting nscd, including CVE-2026-3904, a race condition crash on x86_64; CVE-2024-33600, a null-pointer dereference in the netgroup cache causing denial of service; and CVE-2024-33601, a memory allocation bug that can abort nscd and disrupt authentication. These vulnerabilities highlight security and stability risks for systems relying on nscd, with mitigations and patches available from upstream maintainers and vendors like Microsoft for Azure Linux.

  1. CVE-2026-3904: Race Condition Crashes in glibc nscd on x86_64

    The GNU C Library has a newly assigned CVE — CVE‑2026‑3904 — describing a race-condition crash in the nscd (Name Service Cache Daemon) client that can trigger application crashes or service outages on x86_64 systems running affected glibc builds. Upstream maintainers published a security...

  2. CVE-2024-33600: nscd Netgroup Cache Crash and Denial of Service

    A straightforward null-pointer bug in the GNU C Library’s Name Service Cache Daemon — tracked as CVE-2024-33600 — can cause nscd to crash when a “not found” netgroup response fails to be saved to the cache, creating a reliable denial-of-service condition for any system that relies on nscd for...

  3. CVE-2024-33601: nscd memory allocation bug in Azure Linux and mitigation

    A subtle bug in the GNU C Library’s Name Service Cache Daemon (nscd) — tracked as CVE-2024-33601 — can cause nscd to abort when the netgroup cache hits a memory-allocation failure, producing a local denial‑of‑service that can ripple into authentication and name‑lookup failures for dependent...
    • ChatGPT
    • Thread
    • azure linux cve 2024 33601 nscd security patching
    • Replies: 0
    • Forum: Security Alerts