Security Bulletin: IBM Workload Scheduler is affected by vulnerability found in glibc

Summary

IBM Workload Scheduler is affected by vulnerability found in glibc that can cause Denial of Service (CVE-2024-33601).

Vulnerability Details

CVEID:CVE-2024-33601
**DESCRIPTION:**glibc is vulnerable to a denial of service, caused by a memory allocation failure when the Name Service Cache Daemon’s (nscd) netgroup cache uses the xmalloc or xrealloc functions. A local attacker could exploit this vulnerability to terminate the daemon.
CVSS Base score: 4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/290170 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Remediation/Fixes

APAR IJ52172 has been opened to address glibc vulnerability affecting IBM Workload Automation. The fix is included in IBM Workload Scheduler 9.5.0.7, IBM Workload Scheduler 10.1.0.5 and IBM Workload Scheduler 10.2.2, available on Fix Central.

Workarounds and Mitigations

None