CVE-2014-9984: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of a...

Security readout for executives and security teams

This is an old glibc nscd flaw affecting versions before 2.20. If nscd handles netgroup requests, a buffer-size mistake could crash the daemon or possibly run code as the nscd service user. Business risk depends heavily on whether nscd and netgroups are actually used. Exposure is most likely on legacy Linux or embedded firmware using glibc/libc6 before 2.20 with nscd enabled for netgroup lookups. The bundle also references WAGO 852 and Cisco router advisories, but exact affected firmware versions are not included here. Treat this as targeted legacy exposure work, not a broad emergency from the available evidence. Prioritize assets running old glibc, appliances named by vendor advisories, and systems where nscd supports identity or access workflows. Mitigation focus: Upgrade glibc/libc6 to version 2.20 or later where applicable.; Apply vendor firmware or OS updates that include the glibc fix.; Check WAGO and Cisco advisories if those device families are in inventory..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.