CVE-2014-9984 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9984 Interim 1 20 2023-06-27T00:32:04Z current 2021-05-30T13:25:39Z 2023-06-27T00:32:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00039.html E-Mail link for SUSE-SU-2018:0076-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for the Raspberry Pi 12 SP2 glibc glibc-2.19-22.24.5 glibc-32bit glibc-32bit-2.19-22.24.5 glibc-devel glibc-devel-2.19-22.24.5 glibc-devel-32bit glibc-devel-32bit-2.19-22.24.5 glibc-html glibc-html-2.19-22.24.5 glibc-i18ndata glibc-i18ndata-2.19-22.24.5 glibc-info glibc-info-2.19-22.24.5 glibc-locale glibc-locale-2.19-22.24.5 glibc-locale-32bit glibc-locale-32bit-2.19-22.24.5 glibc-profile glibc-profile-2.19-22.24.5 glibc-profile-32bit glibc-profile-32bit-2.19-22.24.5 nscd nscd-2.19-22.24.5 glibc-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-32bit-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-devel-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-devel-32bit-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-html-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-i18ndata-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-info-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-locale-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-locale-32bit-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-profile-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc-profile-32bit-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS nscd-2.19-22.24.5 as a component of SUSE Linux Enterprise Server 12-LTSS glibc as a component of Magnum Orchestration 7 glibc as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata glibc as a component of SUSE Linux Enterprise Server 11 SP3 LTSS glibc as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata glibc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-devel as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-devel-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-html as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-i18ndata as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-info as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-locale as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-locale-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-profile as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc-profile-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS nscd as a component of SUSE Linux Enterprise Server 11 SP4-LTSS glibc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-html as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-i18ndata as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-info as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-locale as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-locale-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-profile as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc-profile-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS nscd as a component of SUSE Linux Enterprise Server 12 SP1-LTSS glibc as a component of SUSE Linux Enterprise Server 12 SP2 glibc-32bit as a component of SUSE Linux Enterprise Server 12 SP2 glibc-devel as a component of SUSE Linux Enterprise Server 12 SP2 glibc-devel-32bit as a component of SUSE Linux Enterprise Server 12 SP2 glibc-html as a component of SUSE Linux Enterprise Server 12 SP2 glibc-i18ndata as a component of SUSE Linux Enterprise Server 12 SP2 glibc-info as a component of SUSE Linux Enterprise Server 12 SP2 glibc-locale as a component of SUSE Linux Enterprise Server 12 SP2 glibc-locale-32bit as a component of SUSE Linux Enterprise Server 12 SP2 glibc-profile as a component of SUSE Linux Enterprise Server 12 SP2 glibc-profile-32bit as a component of SUSE Linux Enterprise Server 12 SP2 nscd as a component of SUSE Linux Enterprise Server 12 SP2 glibc as a component of SUSE Linux Enterprise Server for the Raspberry Pi 12 SP2 glibc-html as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 glibc-info as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 glibc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd. CVE-2014-9984 SUSE Linux Enterprise Server 12-LTSS:glibc-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-32bit-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-devel-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-devel-32bit-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-html-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-i18ndata-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-info-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-locale-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-locale-32bit-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-profile-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:glibc-profile-32bit-2.19-22.24.5 SUSE Linux Enterprise Server 12-LTSS:nscd-2.19-22.24.5 Magnum Orchestration 7:glibc SUSE Linux Enterprise Server 11 SP1 for Teradata:glibc SUSE Linux Enterprise Server 11 SP3 LTSS:glibc SUSE Linux Enterprise Server 11 SP3 for Teradata:glibc SUSE Linux Enterprise Server 11 SP4-LTSS:glibc SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-devel SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-devel-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-html SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-i18ndata SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-info SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-locale SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-locale-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-profile SUSE Linux Enterprise Server 11 SP4-LTSS:glibc-profile-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:nscd SUSE Linux Enterprise Server 12 SP1-LTSS:glibc SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-devel SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-devel-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-html SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-i18ndata SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-info SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-locale SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-locale-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-profile SUSE Linux Enterprise Server 12 SP1-LTSS:glibc-profile-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:nscd SUSE Linux Enterprise Server 12 SP2:glibc SUSE Linux Enterprise Server 12 SP2:glibc-32bit SUSE Linux Enterprise Server 12 SP2:glibc-devel SUSE Linux Enterprise Server 12 SP2:glibc-devel-32bit SUSE Linux Enterprise Server 12 SP2:glibc-html SUSE Linux Enterprise Server 12 SP2:glibc-i18ndata SUSE Linux Enterprise Server 12 SP2:glibc-info SUSE Linux Enterprise Server 12 SP2:glibc-locale SUSE Linux Enterprise Server 12 SP2:glibc-locale-32bit SUSE Linux Enterprise Server 12 SP2:glibc-profile SUSE Linux Enterprise Server 12 SP2:glibc-profile-32bit SUSE Linux Enterprise Server 12 SP2:nscd SUSE Linux Enterprise Server for the Raspberry Pi 12 SP2:glibc SUSE Linux Enterprise Software Development Kit 11 SP4:glibc SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-html SUSE Linux Enterprise Software Development Kit 11 SP4:glibc-info critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H