4.3

CVE-2014-2980

Exploit
Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnustep ≫ Base Version <= 1.24.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://seclists.org/oss-sec/2014/q2/143
http://seclists.org/oss-sec/2014/q2/152
http://secunia.com/advisories/58104
Vendor Advisory
http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756
http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756
Patch
Exploit
http://www.securityfocus.com/bid/66992
https://exchange.xforce.ibmcloud.com/vulnerabilities/92688
https://savannah.gnu.org/bugs/?41751