CVE-2021-27645

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.29 through 2.33

Description The nameserver caching daemon (nscd) in the GNU C Library, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This issue is related to the netgroupcache.c component.

Recommendations For GNU C Library versions 2.29 through 2.33, consider disabling the netgroupcache.c component or restricting its use until a patch is available to prevent potential Denial of Service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.