This vulnerability is a stack-based buffer overflow in the netgroup cache handling of the nscd daemon within glibc 2.15. When the fixed size cache is fully utilized, further client requests for netgroup data may overflow the stack, potentially leading to arbitrary code execution or denial of service. The issue is specific to the nscd binary and was introduced with the caching mechanism added in glibc 2.15. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity and no privileges or user interaction.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to cause a stack-based buffer overflow in the nscd daemon, potentially leading to remote code execution or denial of service. The impact affects confidentiality, integrity, and availability of the affected system. However, exploitation requires triggering cache exhaustion and sending specific netgroup data requests.

Patch status is not yet confirmed — no official fix or vendor advisory is currently available. Users should monitor the GNU C Library project for updates and apply any forthcoming patches promptly. Until a patch is released, consider disabling or restricting use of the nscd service if feasible to reduce exposure.