VULNERABILITY INTELLIGENCE

CVE-2021-27645

CVSS score2.5 LOW
EPSS probability0.39%
CISA KEVNot currently listed
Published2021-02-24
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.

Weakness classification

  • nvd@nist.gov: CWE-415
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-415

Primary references