According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This     vulnerability is only present in the nscd binary.(CVE-2024-33599)

    nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in     glibc 2.15 when the cache was added to nscd.This vulnerability is only present in the nscd     binary.(CVE-2024-33601)

    nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference.  This flaw was introduced in glibc 2.15 when the     cache was added to nscd.This vulnerability is only present in the nscd binary.(CVE-2024-33600)

    nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided     buffer.The flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability is only     present in the nscd binary.(CVE-2024-33602)

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to     it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to     crash an application or overwrite a neighbouring variable.(CVE-2024-2961)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to     it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to     crash an application or overwrite a neighbouring variable.(CVE-2024-2961)

    nscd: Stack-based buffer overflow in netgroup cache.If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.This     vulnerability is only present in the nscd binary.(CVE-2024-33599)

    nscd: netgroup cache may terminate daemon on memory allocation failure.The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in     glibc 2.15 when the cache was added to nscd.This vulnerability is only present in the nscd     binary.(CVE-2024-33601)

    nscd: Null pointer crashes after notfound response.If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability     is only present in the nscd binary.(CVE-2024-33600)

    nscd: netgroup cache assumes NSS callback uses in-buffer strings.The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided     buffer.The flaw was introduced in glibc 2.15 when the cache was added to nscd.This vulnerability is only     present in the nscd binary.(CVE-2024-33602)

Tenable has extracted the preceding description block directly from the EulerOS glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1750692029 advisory.

  - nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability     is only present in the nscd binary. (CVE-2024-33600)

  - nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in     glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
    (CVE-2024-33601)

  - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
    The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present     in the nscd binary. (CVE-2024-33602)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the glibc package has been released.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:3344 advisory.

  - nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size     cache is exhausted by client requests then a subsequent client request for netgroup data may result in a     stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This     vulnerability is only present in the nscd binary. (CVE-2024-33599)

  - nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails     to add a not-found netgroup response to the cache, the client request can result in a null pointer     dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability     is only present in the nscd binary. (CVE-2024-33600)

  - nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's     (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a     memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in     glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.
    (CVE-2024-33601)

  - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
    The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present     in the nscd binary. (CVE-2024-33602)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:3339 advisory.

    * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT     (CVE-2024-2961)
    * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
    * glibc: null pointer dereferences after failed netgroup cache insertion     (CVE-2024-33600)
    * glibc: netgroup cache may terminate daemon on memory allocation failure     (CVE-2024-33601)
    * glibc: netgroup cache assumes NSS callback uses in-buffer strings     (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1895-1 advisory.

    - CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423)
    - CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424)
    - CVE-2024-33600: Do not send missing not-found response in addgetnetgrentX in nscd (bsc#1223424)
    - CVE-2024-33601, CVE-2024-33602: Fixed use of two buffers in addgetnetgrentX ( bsc#1223425)
    - CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)

    - Avoid creating userspace live patching prologue for _start routine (bsc#1221940)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12440 advisory.

    - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
    - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
    - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
    - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)
    - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-df41d584d0 advisory.

    Auto-sync with upstream branch release/2.38/master

    - Add BuildRequires:gzip for compressed character maps and info files.

    Upstream commit: 4dd8641461463b667b5503ab0ea4abcf261378a9

    - Add crt1-2.0.o for glibc 2.0 compatibility tests
    - libio: Attempt wide backup free only for non-legacy code
    - nptl: Use <support/check.h> facilities in tst-setuid3
    - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
    - ungetc: Fix backup buffer leak on program exit [BZ #27821]
    - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
    - Make tst-ungetc use libsupport
    - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
    - support: Add FAIL test failure helper
    - x86: Fix bug in strchrnul-evex512 [BZ #32078]
    - Fix name space violation in fortify wrappers (bug 32052)
    - resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
    - Update syscall lists for Linux 6.5
    - Add mremap tests
    - mremap: Update manual entry
    - linux: Update the mremap C implementation [BZ #31968]
    - resolv: Track single-request fallback via _res._flags (bug 31476)
    - resolv: Do not wait for non-existing second DNS response after error (bug 30081)
    - resolv: Allow short error responses to match any query (bug 31890)
    - Linux: Make __rseq_size useful for feature detection (bug 31965)
    - elf: Make dl-rseq-symbols Linux only
    - nptl: fix potential merge of __rseq_* relro symbols
    - s390x: Fix segfault in wcsncmp [BZ #31934]
    - misc: Add support for Linux uio.h RWF_NOAPPEND flag
    - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
    - Force DT_RPATH for --enable-hardcoded-path-in-tests
    - resolv: Fix some unaligned accesses in resolver [BZ #30750]
    - nscd: Use time_t for return type of addgetnetgrentX
    - elf: Also compile dl-misc.os with $(rtld-early-cflags)
    - CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
    - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
    - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
    - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
    - i386: ulp update for SSE2 --disable-multi-arch configurations
    - nptl: Fix tst-cancel30 on kernels without ppoll_time64 support
    - login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
    - login: Check default sizes of structs utmp, utmpx, lastlog
    - sparc: Remove 64 bit check on sparc32 wordsize (BZ 27574)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33602 advisory.

  - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd)     netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
    The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present     in the nscd binary. (CVE-2024-33602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8129:05 advisory.

    * glibc: Out of bounds write in iconv may lead to remote code execution     (CVE-2024-2961)
      * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
      * glibc: null pointer dereferences after failed netgroup cache insertion     (CVE-2024-33600)
      * glibc: netgroup cache may terminate daemon on memory allocation failure     (CVE-2024-33601)
      * glibc: netgroup cache assumes NSS callback uses in-buffer strings     (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_3344 advisory.

    * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)

    * glibc: null pointer dereferences after failed netgroup cache insertion     (CVE-2024-33600)

    * glibc: netgroup cache may terminate daemon on memory allocation failure     (CVE-2024-33601)

    * glibc: netgroup cache assumes NSS callback uses in-buffer strings     (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_3339 advisory.

    * glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT     (CVE-2024-2961)

    * glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)

    * glibc: null pointer dereferences after failed netgroup cache insertion     (CVE-2024-33600)

    * glibc: netgroup cache may terminate daemon on memory allocation failure     (CVE-2024-33601)

    * glibc: netgroup cache assumes NSS callback uses in-buffer strings     (CVE-2024-33602)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
205982	EulerOS Virtualization 2.11.1 : glibc (EulerOS-SA-2024-2154)	Nessus	Huawei Local Security Checks	2024/8/21	2026/1/21	high
202522	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2024-1932)	Nessus	Huawei Local Security Checks	2024/7/16	2026/1/21	high
202543	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2024-1959)	Nessus	Huawei Local Security Checks	2024/7/16	2026/1/21	high
351645	CentOS Linux 8 [TuxCare] Security Update: glibc-langpack-bs / glibc-langpack-dz / glibc-langpack-ga / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1750692029)	Nessus	CentOS Local Security Checks	2026/9/30	2026/10/5	high
328959	Photon OS 5.0: Glibc PHSA-2026-5.0-0855	Nessus	PhotonOS Local Security Checks	2026/7/22	2026/10/14	medium
197864	CentOS 8 : glibc (CESA-2024:3344)	Nessus	CentOS Local Security Checks	2024/5/23	2026/1/21	high
197955	AlmaLinux 9 : glibc (ALSA-2024:3339)	Nessus	Alma Linux Local Security Checks	2024/5/28	2026/1/21	high
200086	SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2024:1895-1)	Nessus	SuSE Local Security Checks	2024/6/4	2026/6/26	high
200682	Oracle Linux 8 : glibc (ELSA-2024-12440)	Nessus	Oracle Linux Local Security Checks	2024/6/18	2026/1/21	high
209838	Fedora 39 : glibc (2024-df41d584d0)	Nessus	Fedora Local Security Checks	2024/10/28	2026/1/21	high
241918	Azure Linux 3.0 Security Update: glibc (CVE-2024-33602)	Nessus	Azure Linux Local Security Checks	2025/7/11	2026/1/21	high
292553	MiracleLinux 7 : glibc-2.17-326.el7.3 (AXSA:2024-8129:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/2/5	high
353665	Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (crlsa-2024_3344)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
354165	Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2024_3339)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	high
334050	Photon OS 5.0: Glibc PHSA-2024-5.0-91-0293	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	high

检测

插件搜索

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high