CVE-2021-27645

glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

Published Feb 24, 2021 CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed
Description
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3152-1 glibc security update
EUVD EUVD EUVD-2021-14391 The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
Ubuntu USN Ubuntu USN USN-5310-1 GNU C Library vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00024}

epss

{'score': 0.00037}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 14, 2026, 11:39 AM
Reserved
Feb 24, 2021, 12:00 AM
Status
Modified
Published
Feb 24, 2021, 3:15 PM
Modified
Oct 14, 2026, 12:17 PM
Severity
Low
Public date
Feb 24, 2021, 12:00 AM