CVE-2014-8121: DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2...

Security readout for executives and security teams

This is an older glibc Name Service Switch flaw that can hang a process during certain database lookups. Business impact is availability: affected Linux services may stop responding or consume resources if they perform vulnerable NSS file lookups. The source bundle provides no evidence of active exploitation. Exposure is most likely on older Linux distributions or unpatched systems using glibc/libc6 2.21 or earlier with NSS files lookups. Internet-facing services are relevant only if attacker-controlled requests can cause the service to perform the vulnerable lookup path. Prioritize normal patch management, with faster handling for exposed or business-critical Linux services. This is a denial-of-service issue in a core library, but the provided sources do not show active exploitation or code execution impact. Mitigation focus: Identify systems running glibc or libc6 2.21 and earlier.; Apply vendor glibc/libc6 updates from the relevant Linux distribution advisory.; Prioritize exposed services that perform authentication, user, group, host, or name lookups..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.