NULL pointer dereference in GNU C Library (glibc) - CVE-2024-33600

Vulnerability identifier: #VU89711

CSH Severity: Medium

CVSS v4 BT: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-33600

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error when nscd cache fails to add a not-found netgroup response to the cache. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

GNU C Library (glibc)
PowerStore 9000X
PowerStore 7000X
PowerStore 5000X
PowerStore 3000X
PowerStore 1000X
SmartFabric Storage Software
PowerStoreX OS
Debian Linux
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise High Performance Computing 12
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Server
Anolis OS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Slackware Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
Ubuntu
openEuler
Fedora
Voice Gateway
IBM Cloud Pak System
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
nscd (Ubuntu package)
glibc-headers
glibc-static
glibc-devel
glibc-common
glibc
nscd
glibc-utils
glibc (Red Hat package)
glibc-debuginfo
glibc-debugsource
glibc-devel-debuginfo
glibc-32bit
glibc-locale-32bit
glibc-debuginfo-32bit
glibc-devel-debuginfo-32bit
glibc-profile-32bit
glibc-devel-32bit
glibc-locale-debuginfo-32bit
glibc-html
glibc-i18ndata
glibc-locale
nscd-debuginfo
glibc-profile
glibc-locale-debuginfo
glibc-info
glibc-devel-static
glibc-locale-base-debuginfo
glibc-locale-base
glibc-utils-debuginfo
glibc-utils-src-debugsource
glibc-extra-debuginfo
glibc-utils-src
glibc-32bit-debuginfo
glibc-locale-base-32bit
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-extra
glibc-all-langpacks
glibc-nss-devel
glibc-benchtests
glibc-debugutils
libnsl
glibc-locale-source
nss_modules
glibc-compat-2.17
glibc-help
glibc-langpack-lzh
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-mjw
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-nan
glibc-langpack-nso
glibc-langpack-nr
nss_db
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-nb
glibc-langpack-ku
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
nss_hesiod
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-mn
glibc-langpack-ml
glibc-langpack-mk
glibc-langpack-hak
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-ia
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-kab
glibc-langpack-or
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-doc
glibc-langpack-kk
glibc-langpack-kw
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-sv
glibc-langpack-ve
glibc-langpack-vi
glibc-langpack-wa
glibc-langpack-bs
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-wae
glibc-langpack-wal
glibc-langpack-uz
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-wo
glibc-langpack-xh
glibc-langpack-sm
glibc-langpack-yi
glibc-langpack-to
glibc-langpack-te
glibc-langpack-tg
glibc-langpack-th
glibc-langpack-the
glibc-langpack-ti
glibc-langpack-tig
glibc-langpack-tk
glibc-langpack-tl
glibc-langpack-tn
glibc-langpack-yo
glibc-langpack-tpi
glibc-langpack-tr
glibc-langpack-ts
glibc-langpack-tt
glibc-langpack-ug
glibc-langpack-uk
glibc-langpack-unm
glibc-langpack-ur
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-sah
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-tcy
glibc-langpack-om
glibc-langpack-si
glibc-langpack-yue
glibc-langpack-yuw
glibc-langpack-sl
glibc-langpack-zh
glibc-langpack-zu
glibc-langpack-sk
glibc-minimal-langpack
glibc-langpack-sid
glibc-langpack-oc
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-an
glibc-langpack-bo
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-fr
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-gconv-extra
compat-libpthread-nonshared
glibc-langpack-fur
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-cs
glibc (Debian package)
glibc-i18n
aaa_glibc-solibs
glibc-locale-archive
sys-libs/glibc
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
PowerStore T
Storage Resource Manager
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
Storage Ceph
IBM supplied MQ Advanced container images
EMC Cloud Tiering Appliance
IBM Security Verify Governance
Migration Toolkit for Runtimes
Service Interconnect
IBM MQ Operator
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift distributed tracing (RHOSDT)
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
Session Smart Router
IBM Workload Scheduler
Red Hat build of Keycloak
Juniper Junos Space
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat OpenShift GitOps
IBM Integrated Analytics System
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
Dell EMC Storage Monitoring and Reporting (SMR)
Red Hat Ceph Storage
IBM Storage Scale System
Red Hat Single Sign-On
Dell EMC VxRail Appliance
IBM Security Guardium

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Voice Gateway - update to 1.0.8.12
SmartFabric Storage Software - update to 1.4.3
IBM Cloud Pak System - update to 2.3.5.0
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
IBM Business Automation Manager Open Editions - update to 9.1.1
IBM Security Verify Governance - update to 10.0.2.0.5
Juniper Junos Space - update to 24.1R3
nscd (Ubuntu package) - addressed in versions Ubuntu Pro, 2.31-0ubuntu9.16, 2.35-0ubuntu3.8, 2.38-1ubuntu6.3, 2.39-0ubuntu8.2
Migration Toolkit for Runtimes - update to 1.2.6
OpenShift API for Data Protection (OADP) - update to 1.3.2
Service Interconnect - addressed in versions 1.4.5, 1.5.4
Network Observability plugin for the Openshift Console - update to 1.6.0
Migration Toolkit for Containers - update to 1.8.4
Red Hat OpenShift GitOps - addressed in versions 1.11.6, 1.12.4, 1.12.5, 1.13.1
Red Hat OpenShift Serverless - update to 1.33.0
IBM MQ Operator - addressed in versions 2.0.22, 3.1.3
Ansible Automation Platform - update to 2.4
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.7, 2.10.4
glibc-headers - addressed in versions 2.17-326, 2.28-251.0.1
glibc-static - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc-devel - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc-common - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
nscd - addressed in versions 2.17-326, 2.28-251.0.1
glibc-utils - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc (Red Hat package) - addressed in versions 2.17-326.el7_9.3, 2.28-101.el8_2.2, 2.28-151.el8_4.2, 2.28-189.10.el8_6, 2.28-225.el8_8.11, 2.28-251.el8_10.2, 2.34-28.el9_0.6, 2.34-60.el9_2.14, 2.34-100.el9_4.2
glibc-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-debugsource - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-devel-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-32bit - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-32bit - update to 2.22-114.34.1
glibc-debuginfo-32bit - update to 2.22-114.34.1
glibc-devel-debuginfo-32bit - update to 2.22-114.34.1
glibc-profile-32bit - update to 2.22-114.34.1
glibc-devel-32bit - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-debuginfo-32bit - update to 2.22-114.34.1
glibc-html - update to 2.22-114.34.1
glibc-i18ndata - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
nscd - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
nscd-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-profile - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-debuginfo - update to 2.22-114.34.1
glibc-devel - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-info - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-devel-static - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-utils - update to 2.26-150000.13.73.1
glibc-locale-base-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base - update to 2.26-150000.13.73.1
glibc-utils-debuginfo - update to 2.26-150000.13.73.1
glibc-utils-src-debugsource - update to 2.26-150000.13.73.1
glibc-extra-debuginfo - update to 2.26-150000.13.73.1
glibc-utils-src - update to 2.26-150000.13.73.1
glibc-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-32bit - update to 2.26-150000.13.73.1
glibc-devel-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-extra - update to 2.26-150000.13.73.1
glibc-common - addressed in versions 2.28-101, 2.34-150
glibc - addressed in versions 2.28-101, 2.34-150
glibc-all-langpacks - addressed in versions 2.28-101, 2.34-150
glibc-nss-devel - addressed in versions 2.28-101, 2.34-150
glibc-debugsource - addressed in versions 2.28-101, 2.34-150
glibc-benchtests - update to 2.28-101
glibc-debugutils - addressed in versions 2.28-101, 2.34-150
glibc-devel - addressed in versions 2.28-101, 2.34-150
libnsl - addressed in versions 2.28-101, 2.34-150
glibc-debuginfo - addressed in versions 2.28-101, 2.34-150
glibc-locale-source - addressed in versions 2.28-101, 2.34-150
nscd - addressed in versions 2.28-101, 2.34-150
nss_modules - addressed in versions 2.28-101, 2.34-150
glibc-compat-2.17 - addressed in versions 2.28-101, 2.34-150
glibc-help - addressed in versions 2.28-101, 2.34-150
glibc-langpack-lzh - update to 2.28-251.0.1
glibc-langpack-miq - update to 2.28-251.0.1
glibc-langpack-mi - update to 2.28-251.0.1
glibc-langpack-mhr - update to 2.28-251.0.1
glibc-langpack-mg - update to 2.28-251.0.1
glibc-langpack-mfe - update to 2.28-251.0.1
glibc-langpack-mai - update to 2.28-251.0.1
glibc-langpack-mag - update to 2.28-251.0.1
glibc-langpack-mjw - update to 2.28-251.0.1
glibc-langpack-lv - update to 2.28-251.0.1
glibc-langpack-lt - update to 2.28-251.0.1
glibc-langpack-lo - update to 2.28-251.0.1
glibc-langpack-ln - update to 2.28-251.0.1
glibc-langpack-lij - update to 2.28-251.0.1
glibc-langpack-li - update to 2.28-251.0.1
glibc-langpack-lg - update to 2.28-251.0.1
glibc-langpack-lb - update to 2.28-251.0.1
glibc-langpack-ky - update to 2.28-251.0.1
glibc-langpack-nan - update to 2.28-251.0.1
glibc-langpack-nso - update to 2.28-251.0.1
glibc-langpack-nr - update to 2.28-251.0.1
nss_db - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-nn - update to 2.28-251.0.1
glibc-langpack-nl - update to 2.28-251.0.1
glibc-langpack-niu - update to 2.28-251.0.1
glibc-langpack-nhn - update to 2.28-251.0.1
glibc-langpack-ne - update to 2.28-251.0.1
glibc-langpack-nds - update to 2.28-251.0.1
glibc-langpack-nb - update to 2.28-251.0.1
glibc-langpack-ku - update to 2.28-251.0.1
glibc-langpack-my - update to 2.28-251.0.1
glibc-langpack-mt - update to 2.28-251.0.1
glibc-langpack-ms - update to 2.28-251.0.1
nss_hesiod - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-mr - update to 2.28-251.0.1
glibc-langpack-mni - update to 2.28-251.0.1
glibc-langpack-mn - update to 2.28-251.0.1
glibc-langpack-ml - update to 2.28-251.0.1
glibc-langpack-mk - update to 2.28-251.0.1
glibc-langpack-hak - update to 2.28-251.0.1
glibc-langpack-hy - update to 2.28-251.0.1
glibc-langpack-hu - update to 2.28-251.0.1
glibc-langpack-ht - update to 2.28-251.0.1
glibc-langpack-hsb - update to 2.28-251.0.1
glibc-langpack-hr - update to 2.28-251.0.1
glibc-langpack-hne - update to 2.28-251.0.1
glibc-langpack-hif - update to 2.28-251.0.1
glibc-langpack-hi - update to 2.28-251.0.1
glibc-langpack-he - update to 2.28-251.0.1
glibc-langpack-ia - update to 2.28-251.0.1
glibc-langpack-ha - update to 2.28-251.0.1
glibc-langpack-gv - update to 2.28-251.0.1
glibc-langpack-gu - update to 2.28-251.0.1
glibc-langpack-gl - update to 2.28-251.0.1
glibc-langpack-gez - update to 2.28-251.0.1
glibc-langpack-gd - update to 2.28-251.0.1
glibc-langpack-ga - update to 2.28-251.0.1
glibc-langpack-fy - update to 2.28-251.0.1
glibc-langpack-kab - update to 2.28-251.0.1
glibc-langpack-or - update to 2.28-251.0.1
glibc-langpack-ks - update to 2.28-251.0.1
glibc-langpack-kok - update to 2.28-251.0.1
glibc-langpack-ko - update to 2.28-251.0.1
glibc-langpack-kn - update to 2.28-251.0.1
glibc-langpack-km - update to 2.28-251.0.1
glibc-langpack-kl - update to 2.28-251.0.1
glibc-doc - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-kk - update to 2.28-251.0.1
glibc-langpack-kw - update to 2.28-251.0.1
glibc-langpack-ka - update to 2.28-251.0.1
glibc-langpack-ja - update to 2.28-251.0.1
glibc-langpack-iu - update to 2.28-251.0.1
glibc-langpack-it - update to 2.28-251.0.1
glibc-langpack-is - update to 2.28-251.0.1
glibc-langpack-ik - update to 2.28-251.0.1
glibc-langpack-ig - update to 2.28-251.0.1
glibc-langpack-id - update to 2.28-251.0.1
glibc-langpack-sv - update to 2.28-251.0.1
glibc-langpack-ve - update to 2.28-251.0.1
glibc-langpack-vi - update to 2.28-251.0.1
glibc-langpack-wa - update to 2.28-251.0.1
glibc-langpack-bs - update to 2.28-251.0.1
glibc-langpack-ta - update to 2.28-251.0.1
glibc-langpack-szl - update to 2.28-251.0.1
glibc-langpack-sw - update to 2.28-251.0.1
glibc-langpack-wae - update to 2.28-251.0.1
glibc-langpack-wal - update to 2.28-251.0.1
glibc-langpack-uz - update to 2.28-251.0.1
glibc-langpack-st - update to 2.28-251.0.1
glibc-langpack-ss - update to 2.28-251.0.1
glibc-langpack-sr - update to 2.28-251.0.1
glibc-langpack-sq - update to 2.28-251.0.1
glibc-langpack-so - update to 2.28-251.0.1
glibc-langpack-wo - update to 2.28-251.0.1
glibc-langpack-xh - update to 2.28-251.0.1
glibc-langpack-sm - update to 2.28-251.0.1
glibc-langpack-yi - update to 2.28-251.0.1
glibc-langpack-to - update to 2.28-251.0.1
glibc-langpack-te - update to 2.28-251.0.1
glibc-langpack-tg - update to 2.28-251.0.1
glibc-langpack-th - update to 2.28-251.0.1
glibc-langpack-the - update to 2.28-251.0.1
glibc-langpack-ti - update to 2.28-251.0.1
glibc-langpack-tig - update to 2.28-251.0.1
glibc-langpack-tk - update to 2.28-251.0.1
glibc-langpack-tl - update to 2.28-251.0.1
glibc-langpack-tn - update to 2.28-251.0.1
glibc-langpack-yo - update to 2.28-251.0.1
glibc-langpack-tpi - update to 2.28-251.0.1
glibc-langpack-tr - update to 2.28-251.0.1
glibc-langpack-ts - update to 2.28-251.0.1
glibc-langpack-tt - update to 2.28-251.0.1
glibc-langpack-ug - update to 2.28-251.0.1
glibc-langpack-uk - update to 2.28-251.0.1
glibc-langpack-unm - update to 2.28-251.0.1
glibc-langpack-ur - update to 2.28-251.0.1
glibc-langpack-sa - update to 2.28-251.0.1
glibc-langpack-rw - update to 2.28-251.0.1
glibc-langpack-ru - update to 2.28-251.0.1
glibc-langpack-ro - update to 2.28-251.0.1
libnsl - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-raj - update to 2.28-251.0.1
glibc-langpack-quz - update to 2.28-251.0.1
glibc-langpack-sah - update to 2.28-251.0.1
glibc-langpack-pt - update to 2.28-251.0.1
glibc-langpack-ps - update to 2.28-251.0.1
glibc-langpack-pl - update to 2.28-251.0.1
glibc-langpack-pap - update to 2.28-251.0.1
glibc-langpack-pa - update to 2.28-251.0.1
glibc-langpack-os - update to 2.28-251.0.1
glibc-langpack-tcy - update to 2.28-251.0.1
glibc-langpack-om - update to 2.28-251.0.1
glibc-langpack-si - update to 2.28-251.0.1
glibc-langpack-yue - update to 2.28-251.0.1
glibc-langpack-yuw - update to 2.28-251.0.1
glibc-langpack-sl - update to 2.28-251.0.1
glibc-langpack-zh - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-zu - update to 2.28-251.0.1
glibc-langpack-sk - update to 2.28-251.0.1
glibc-locale-source - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-minimal-langpack - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-sid - update to 2.28-251.0.1
glibc-langpack-oc - update to 2.28-251.0.1
glibc-langpack-shs - update to 2.28-251.0.1
glibc-langpack-shn - update to 2.28-251.0.1
glibc-langpack-sgs - update to 2.28-251.0.1
glibc-nss-devel - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-se - update to 2.28-251.0.1
glibc-langpack-sd - update to 2.28-251.0.1
glibc-langpack-sc - update to 2.28-251.0.1
glibc-langpack-sat - update to 2.28-251.0.1
glibc-langpack-an - update to 2.28-251.0.1
glibc-langpack-bo - update to 2.28-251.0.1
glibc-langpack-bn - update to 2.28-251.0.1
glibc-langpack-bi - update to 2.28-251.0.1
glibc-langpack-bho - update to 2.28-251.0.1
glibc-langpack-bhb - update to 2.28-251.0.1
glibc-langpack-bg - update to 2.28-251.0.1
glibc-langpack-ber - update to 2.28-251.0.1
glibc-langpack-bem - update to 2.28-251.0.1
glibc-langpack-be - update to 2.28-251.0.1
glibc-langpack-az - update to 2.28-251.0.1
glibc-langpack-ayc - update to 2.28-251.0.1
glibc-langpack-ast - update to 2.28-251.0.1
glibc-langpack-as - update to 2.28-251.0.1
glibc-langpack-ar - update to 2.28-251.0.1
glibc-langpack-anp - update to 2.28-251.0.1
glibc-langpack-fr - update to 2.28-251.0.1
glibc-langpack-am - update to 2.28-251.0.1
glibc-langpack-ak - update to 2.28-251.0.1
glibc-langpack-agr - update to 2.28-251.0.1
glibc-langpack-af - update to 2.28-251.0.1
glibc-langpack-aa - update to 2.28-251.0.1
glibc-gconv-extra - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-benchtests - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-all-langpacks - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
compat-libpthread-nonshared - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-fur - update to 2.28-251.0.1
glibc-langpack-brx - update to 2.28-251.0.1
glibc-langpack-br - update to 2.28-251.0.1
glibc-langpack-fo - update to 2.28-251.0.1
glibc-langpack-fil - update to 2.28-251.0.1
glibc-langpack-fi - update to 2.28-251.0.1
glibc-langpack-ff - update to 2.28-251.0.1
glibc-langpack-fa - update to 2.28-251.0.1
glibc-langpack-eu - update to 2.28-251.0.1
glibc-langpack-et - update to 2.28-251.0.1
glibc-langpack-es - update to 2.28-251.0.1
glibc-langpack-eo - update to 2.28-251.0.1
glibc-langpack-en - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-el - update to 2.28-251.0.1
glibc-langpack-dz - update to 2.28-251.0.1
glibc-langpack-dv - update to 2.28-251.0.1
glibc-langpack-doi - update to 2.28-251.0.1
glibc-langpack-dsb - update to 2.28-251.0.1
glibc-langpack-byn - update to 2.28-251.0.1
glibc-langpack-ca - update to 2.28-251.0.1
glibc-langpack-ce - update to 2.28-251.0.1
glibc-langpack-chr - update to 2.28-251.0.1
glibc-langpack-cmn - update to 2.28-251.0.1
glibc-langpack-crh - update to 2.28-251.0.1
glibc-langpack-csb - update to 2.28-251.0.1
glibc-langpack-cv - update to 2.28-251.0.1
glibc-langpack-cy - update to 2.28-251.0.1
glibc-langpack-da - update to 2.28-251.0.1
glibc-langpack-de - update to 2.28-251.0.1
glibc-langpack-cs - update to 2.28-251.0.1
glibc (Debian package) - addressed in versions 2.31-13+deb11u10, 2.36-9+deb12u7
glibc-profile - update to 2.33
glibc-i18n - update to 2.33
glibc - update to 2.33
aaa_glibc-solibs - update to 2.33
glibc-locale-archive - update to 2.34-150
sys-libs/glibc - update to 2.38-r13
glibc - update to 2.38-19.fc39
Red Hat OpenShift distributed tracing (RHOSDT) - update to 3.2.0
PowerStoreX OS - update to 3.2.1.5-2424458
PowerStore T - update to 3.6.1.4-2413340
Red Hat OpenShift Dev Spaces - update to 3.15.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.57, 4.12.59, 4.13.42, 4.13.45, 4.14.26, 4.14.28, 4.14.32, 4.14.33, 4.15.14
OpenShift Virtualization - update to 4.14.6
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.2.0
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
watsonx Assistant Cartridge - update to 5.1.1
Red Hat Ceph Storage - update to 5.3
IBM Storage Scale System - addressed in versions 6.1.9.4, 6.2.1.0
Red Hat Migration Toolkit for Applications - update to 6.2.3
Session Smart Router - addressed in versions 6.2.10, 6.3.7
Storage Ceph - update to 7.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
Red Hat Single Sign-On - update to 7.6.9
Dell EMC VxRail Appliance - update to 8.0.213
OpenShift Container Platform for Windows Containers - addressed in versions 8.1.3, 10.15.3
IBM Integrated Analytics System - update to 8.8.24.10.SP1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.17-r2, 9.3.5.1-r2
IBM Workload Scheduler - addressed in versions 10.1.0.5, 10.2.3
IBM Security Guardium - addressed in versions 11.0 p6509, 12.0 p6009
EMC Cloud Tiering Appliance - update to 13.2.0.2.31
Red Hat build of Keycloak - addressed in versions 22.0.11, 24.0.5

• https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006

• Multiple vulnerabilities in GNU Glibc
• SUSE update for glibc
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• openEuler update for glibc
• openEuler 20.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP2 update for glibc
• Ubuntu update for glibc
• openEuler 22.03 LTS SP3 update for glibc
• SUSE update for glibc
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 8.8 Extended Update Support update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9.0 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8.2 Advanced Update Support update for glibc
• Red Hat Enterprise Linux 7 update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless 1.33
• Multiple vulnerabilities in Service Interconnect 1.5
• Gentoo update for glibc
• Multiple vulnerabilities in Service Interconnect 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat Ceph Storage 5
• Debian update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Slackware Linux update for glibc
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• NULL pointer dereference in IBM Storage Ceph
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in App Connect Enterprise Certified Container
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 10.15
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 8.1
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Red Hat build of Keycloak 24.0
• Multiple vulnerabilities in Red Hat build of Keycloak 22.0
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Fedora 39 update for glibc
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in IBM QRadar SIEM
• IBM Integrated Analytics System update for GNU glibc
• Multiple vulnerabilities in Dell PowerStore T
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in IBM Workload Scheduler component of IBM Workload Automation
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Multiple vulnerabilities in IBM Cloud Pak System
• Anolis OS update for glibc
• Anolis OS update for glibc
• Dell SmartFabric Storage Software update for third-party components
• Junos Space update for third-party components
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in IBM Security Verify Governance
• Anolis OS update for glibc
• Juniper Session Smart Router update for third-party components
• Multiple vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) 3.2