CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX ...
commit7835b00dbce53c3c87bbbb1754a95fb5e58187aa
authorFlorian Weimer <fweimer@redhat.com>
Thu, 25 Apr 2024 13:01:07 +0000 (25 15:01 +0200)
committerFlorian Weimer <fweimer@redhat.com>
Thu, 25 Apr 2024 13:01:07 +0000 (25 15:01 +0200)
treeb1e77c4665577f625d26deb1c472ed13c5893dc3
parent87801a8fd06db1d654eea3e4f7626ff476a9bdaa
CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)

If we failed to add a not-found response to the cache, the dataset
point can be null, resulting in a null pointer dereference.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
nscd/netgroupcache.c