CVE-2014-9984 Memory corruption in n/a
A buffer size miscalculation in nscd allows attackers to cause a crash or execute code as the nscd user.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-9984?
CVE-2014-9984 is a critical memory corruption vulnerability in Gnu Glibc, published on 12 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.
Weakness: CWE-119
Which versions are affected by CVE-2014-9984?
It affects 1 product.
Products include Gnu Glibc.
How do I fix CVE-2014-9984?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-9984 being exploited?
There is no known exploitation of CVE-2014-9984 in the wild and no public exploit code.
Other vulnerabilities in Gnu Glibc
Sources
Also known as DEBIAN-CVE-2014-9984, GHSA-qp88-3vr4-mjq3, UBUNTU-CVE-2014-9984.