[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]}]

[{"vendor":"gnu","product":"glibc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gnu:glibc:2.15:*:*:*:*:*:*:*"],"versions":[{"version":"2.15","lessThan":"2.40","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-06-13T16:09:29.755117Z","id":"CVE-2024-33602","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"The GNU C Library","product":"glibc","defaultStatus":"unaffected","versions":[{"version":"2.15","lessThan":"2.40","versionType":"custom","status":"affected"}]}]

https://cert-portal.siemens.com/productcert/html/ssa-082556.html

AND
     OR
          *cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

OR
          *cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* versions from (including) 2.15 up to (excluding) 2.40

OR
          *cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
          *cpe:2.3:a:netapp:solidfire_&_hci_management_node:-:*:*:*:*:*:*:*
          *cpe:2.3:a:netapp:solidfire_&_hci_storage_node:-:*:*:*:*:*:*:*

OR
          *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

OR
          *cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*

CVE: http://www.openwall.com/lists/oss-security/2024/07/22/5 Types: Mailing List

CVE: https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html Types: Mailing List, Third Party Advisory

CVE: https://security.netapp.com/advisory/ntap-20240524-0012/ Types: Third Party Advisory

CVE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008 Types: Broken Link

GNU C Library: http://www.openwall.com/lists/oss-security/2024/07/22/5 Types: Mailing List

GNU C Library: https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html Types: Mailing List, Third Party Advisory

GNU C Library: https://security.netapp.com/advisory/ntap-20240524-0012/ Types: Third Party Advisory

GNU C Library: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008 Types: Broken Link

nscd: netgroup cache assumes NSS callback uses in-buffer strings

The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory
when the NSS callback does not store all strings in the provided buffer.
The flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

nscd: netgroup cache assumes NSS callback uses in-buffer strings

The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory
when the NSS callback does not store all strings in the provided buffer.
The flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

http://www.openwall.com/lists/oss-security/2024/07/22/5

https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html

https://security.netapp.com/advisory/ntap-20240524-0012/

https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

GNU C Library http://www.openwall.com/lists/oss-security/2024/07/22/5 [No types assigned]

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

GNU C Library https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html [No types assigned]

GNU C Library https://security.netapp.com/advisory/ntap-20240524-0012/ [No types assigned]

nscd: netgroup cache assumes NSS callback uses in-buffer strings

The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory
when the NSS callback does not store all strings in the provided buffer.
The flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

GNU C Library CWE-466

GNU C Library https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008 [No types assigned]