Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-3904

Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on inputs that are concurrently modified by other processes or threads and crash. The nscd client in the GNU C Library uses the memcmp function with inputs that may be concurrently modified by another thread, potentially resulting in spurious cache misses, which in itself is not a security issue
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e3eed77648bfdf3e628fa8383121abe5f1b598e3d96f3f651e07c6fb123e3ddc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 6 assertions

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/2

{"defaultStatus":"unaffected","platforms":["x86"],"product":"glibc","vendor":"The GNU C Library","versions":[{"lessThan":"2.37","status":"affected","version":"2.35","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/3

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/0

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/4

Affected products and versions

6 source assertions
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/2
{"defaultStatus":"unaffected","platforms":["x86"],"product":"glibc","vendor":"The GNU C Library","versions":[{"lessThan":"2.37","status":"affected","version":"2.35","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/3
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/0
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.6","status":"affected","version":"V3.1.5","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/affected/4

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/1/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-366","description":"CWE-366 Race condition within a thread","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/problemTypes/0/descriptions/0

Source references

6 source assertions
{"url":"http://www.openwall.com/lists/oss-security/2026/03/11/5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/0/references/0
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/adp/2/references/0
{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29863"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/references/1
{"url":"https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0004;hb=HEAD"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/references/0
{"url":"https://sourceware.org/git/?p=glibc.git;a=commit;h=8804157ad9da39631703b92315460808eac86b0c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/references/2
{"url":"https://sourceware.org/git/?p=glibc.git;a=commit;h=b712be52645282c706a5faa038242504feb06db5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:47155743c9f6378e88403e0a564e56d03c90ecc290f9f44fc69573d46291c0ff · sha256:c8002ef1e3f5a282… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer