CVE-2026-89092
published 2026-09-11CVE-2026-89092: The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query…
PriorityP422medium4.2CVSS 3.1
AVAACHPRNUINSUCNILAL
EPSS
0.24%
14.2th percentile
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a
stack overflow when a malicious DNS server returns too large a response
for a DNS query, resulting in degraded DNS resolution for the system.
Exploitation of this bug needs a system that has nscd enabled and using
an untrusted DNS server for name resolution, with the compromised DNS
server being capable of processing records large enough to result in a
stack overflow in an nscd thread stack. During experimentation, bind 9
was unable to handle large records, but that could change in future or
with a different name server. In typical installations, nscd is
executed in an isolated context as its own user without a shell, due to
which any compromise of that service is isolated.
There is a remote possibility of nscd cache corruption if an attacker
manages to get the stack pointer into a desired point in the heap,
potentially resulting in other caches in nscd being overwritten with
corrupt data through the stack overflow, until the buggy code path
eventually results in a crash.
Finally, a crash in nscd may result in performance degradation when
resolving names, but it does not result in a denial of service.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | glibc | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| the_gnu_c_library | glibc | >= 2.3.4 < 2.45 | 2.45 |
CVSS provenance
nvdv3.14.2MEDIUMCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
vendor_redhat4.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution f
ghsa_unreviewed·2026-09-11
CVE-2026-89092 [MEDIUM] CWE-789 The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution f
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a
stack overflow when a malicious DNS server returns too large a response
for a DNS query, resulting in degraded DNS resolution for the system.
Exploitation of this bug needs a system that has nscd enabled and using
an untrusted DNS server for name resolution, with the compromised DNS
server being capable of processing records large enough to result in a
stack overflow in an nscd thread stack. During experimentation, bind 9
was unable to handle large records, but that could change in future or
with a different name server. In typical installations, nscd is
executed in an isolated context as its own user without a shell, due to
which any compromise of that service is isolated.
There is a remote possibility of nscd cach
VulDB
GNU C Library up to 2.44 nscd stack-based overflow
vuldb·2026-09-11
CVE-2026-89092 [CRITICAL] GNU C Library up to 2.44 nscd stack-based overflow
A vulnerability was found in GNU C Library up to 2.44. It has been declared as critical. The impacted element is an unknown function of the component nscd. Executing a manipulation can lead to stack-based buffer overflow.
This vulnerability is registered as CVE-2026-89092. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
Red Hat
glibc: glibc: nscd stack overflow leads to degraded DNS resolution
vendor_redhat·2026-09-11·CVSS 4.2
CVE-2026-89092 [MEDIUM] CWE-120 glibc: glibc: nscd stack overflow leads to degraded DNS resolution
glibc: glibc: nscd stack overflow leads to degraded DNS resolution
A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for the system. There is also a remote possibility of nscd cache corruption.
Package: glibc (Red Hat Hardened Images) - Affected
Package: openshift/ose-rhel-coreos-8 (Red Hat OpenShift Container Platform 4) - Fix deferred
Package: openshift/ose-rhel-coreos-9 (Red Hat OpenShift Container Platform 4) - Fix deferred
No detection rules found.
No public exploits indexed.
2026-09-11
Published