According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This     vulnerability is only present in the nscd binary.(CVE-2024-33599)

    nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in     glibc 2.15 when the cache was added to nscd.This vulnerability is only present in the nscd     binary.(CVE-2024-33601)

    nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference.  This flaw was introduced in glibc 2.15 when the     cache was added to nscd.This vulnerability is only present in the nscd binary.(CVE-2024-33600)

    nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided     buffer.The flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability is only     present in the nscd binary.(CVE-2024-33602)

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to     it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to     crash an application or overwrite a neighbouring variable.(CVE-2024-2961)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to     it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to     crash an application or overwrite a neighbouring variable.(CVE-2024-2961)

    nscd: Stack-based buffer overflow in netgroup cache.If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.This     vulnerability is only present in the nscd binary.(CVE-2024-33599)

    nscd: Null pointer crashes after notfound response.If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability     is only present in the nscd binary.(CVE-2024-33600)

    nscd: netgroup cache may terminate daemon on memory allocation failure.The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in     glibc 2.15 when the cache was added to nscd.This vulnerability is only present in the nscd     binary.(CVE-2024-33601)

    nscd: netgroup cache assumes NSS callback uses in-buffer strings.The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided     buffer.The flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability is only     present in the nscd binary.(CVE-2024-33602)

Tenable has extracted the preceding description block directly from the EulerOS glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the glibc package has been released.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6804-1 advisory.

    It was discovered that GNU C Library nscd daemon contained a stack-based buffer overflow. A local attacker     could use this to cause a denial of service (system crash). (CVE-2024-33599)

    It was discovered that GNU C Library nscd daemon did not properly check the cache content, leading to a     null pointer dereference vulnerability. A local attacker could use this to cause a denial of service     (system crash). (CVE-2024-33600)

    It was discovered that GNU C Library nscd daemon did not properly validate memory allocation in certain     situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause     a denial of service (system crash). (CVE-2024-33601)

    It was discovered that GNU C Library nscd daemon did not properly handle memory allocation, which could     lead to memory corruption. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3339 advisory.

    * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT     (CVE-2024-2961)

    * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)

    * glibc: null pointer dereferences after failed netgroup cache insertion     (CVE-2024-33600)

    * glibc: netgroup cache may terminate daemon on memory allocation failure     (CVE-2024-33601)

    * glibc: netgroup cache assumes NSS callback uses in-buffer strings     (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has glibc packages installed that are affected by multiple vulnerabilities:

  - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
    The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present     in the nscd binary. (CVE-2024-33602)

  - nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This     vulnerability is only present in the nscd binary. (CVE-2024-33599)

  - nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability     is only present in the nscd binary. (CVE-2024-33600)

  - nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in     glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
    (CVE-2024-33601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0012 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-33599:
    nscd: Stack-based buffer overflow in netgroup cache     If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted     by client requests then a subsequent client request for netgroup data     may result in a stack-based buffer overflow.  This flaw was introduced     in glibc 2.15 when the cache was added to nscd.
    This vulnerability is only present in the nscd binary.

    CVE-2024-33600:
    nscd: Null pointer crashes after notfound response     If the Name Service Cache Daemon's (nscd) cache fails to add a not-found     netgroup response to the cache, the client request can result in a null     pointer dereference.  This flaw was introduced in glibc 2.15 when the     cache was added to nscd.
    This vulnerability is only present in the nscd binary.

    CVE-2024-33601:
    nscd: netgroup cache may terminate daemon on memory allocation failure     The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or     xrealloc and these functions may terminate the process due to a memory     allocation failure resulting in a denial of service to the clients.  The     flaw was introduced in glibc 2.15 when the cache was added to nscd.
    This vulnerability is only present in the nscd binary.

    CVE-2024-33602:
    nscd: netgroup cache assumes NSS callback uses in-buffer strings     The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory     when the NSS callback does not store all strings in the provided buffer.
    The flaw was introduced in glibc 2.15 when the cache was added to nscd.
    This vulnerability is only present in the nscd binary.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This     vulnerability is only present in the nscd binary. (CVE-2024-33599)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0304 advisory.

    This advisory aggregates security fixes for the glibc SRPM in CIQ LTS 8.8. It addresses 5 CVEs:
    CVE-2024-2961, CVE-2024-33601, CVE-2024-33602, CVE-2024-33599, CVE-2024-33600.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
205953	EulerOS Virtualization 2.11.0 : glibc (EulerOS-SA-2024-2179)	Nessus	Huawei Local Security Checks	2024/8/20	2026/1/21	high
202421	EulerOS 2.0 SP10 : glibc (EulerOS-SA-2024-1883)	Nessus	Huawei Local Security Checks	2024/7/15	2026/1/21	high
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	2024/9/9	2025/10/6	medium
204426	Photon OS 4.0: Glibc PHSA-2024-4.0-0633	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/1/21	high
198244	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : GNU C Library vulnerabilities (USN-6804-1)	Nessus	Ubuntu Local Security Checks	2024/5/31	2026/1/21	high
200561	Rocky Linux 9 : glibc (RLSA-2024:3339)	Nessus	Rocky Linux Local Security Checks	2024/6/14	2026/1/21	high
238019	NewStart CGSL MAIN 7.02 : glibc Multiple Vulnerabilities (NS-SA-2025-0079)	Nessus	NewStart CGSL Local Security Checks	2025/6/9	2026/1/21	high
236400	Alibaba Cloud Linux 3 : 0012: glibc (ALINUX3-SA-2025:0012)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
248832	Linux Distros Unpatched Vulnerability : CVE-2024-33599	Nessus	Misc.	2025/8/12	2026/8/10	high
355561	Rocky Linux 8.8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ciqsa-2026_0304)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high

检测

插件搜索

high

high

medium

high

high

high

high

high

high

high