The vulnerability CVE-2024-33601 involves the nscd netgroup cache in glibc 2.15, where the use of xmalloc or xrealloc for memory allocation can cause the daemon to terminate if allocation fails. This results in a reachable assertion failure (CWE-617) causing denial of service to clients relying on nscd. The issue is specific to the nscd binary and was introduced with the addition of the cache feature in version 2.15. The CVSS 3.1 base score is 7.3, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation causes the nscd daemon to terminate unexpectedly due to memory allocation failure, resulting in denial of service to clients relying on name service caching. The impact affects availability primarily, with some confidentiality and integrity impact as indicated by the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should monitor nscd service stability and consider disabling the netgroup cache feature if feasible to mitigate potential denial of service. No official remediation or temporary fixes have been published at this time.