CVE-2014-9984

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.44%

Published

Jun 12, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

Weaknesses (CWE)

CWE-119

Affected Products (1)

gnu · glibcvulnerable

References (18)

http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html

http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html

http://seclists.org/fulldisclosure/2019/Jun/18

http://seclists.org/fulldisclosure/2019/Sep/7

http://www.securityfocus.com/bid/99071

https://seclists.org/bugtraq/2019/Jun/14

https://seclists.org/bugtraq/2019/Sep/7

https://sourceware.org/bugzilla/show_bug.cgi?id=16695

Issue TrackingPatchThird Party Advisory

https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=c44496df2f090a56d3bf75df930592dac6bba46f