peter bassill · operator
$ cve CVE-2014-9984 JSON

CVE-2014-9984

9.8
CRITICAL · CVSS 3.0 · EPSS 4.5% (pctl 91)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS4.48% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploitnone known
Published2017-06-12
Last modified2026-06-17

Affected (1)

VendorProduct
gnuglibc

References

→ the Explorer  ·  watch your stack  ·  NVD