gnustep gnustep base vulnerabilities and exploits

(subscribe to this query)

Tools/gdomap.c in gdomap in GNUstep Base prior to 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.

Gnustep Gnustep Base Gnustep Gnustep Base 1.19.1 Gnustep Gnustep Base 1.15.0 Gnustep Gnustep Base 1.13.0 Gnustep Gnustep Base 1.12.0 Gnustep Gnustep Base 1.11.2 Gnustep Gnustep Base 1.18.0 Gnustep Gnustep Base 1.17.0 Gnustep Gnustep Base 1.15.4 Gnustep Gnustep Base 1.15.2 Gnustep Gnustep Base 1.19.2 Gnustep Gnustep Base 1.19.0 Gnustep Gnustep Base 1.15.1 Gnustep Gnustep Base 1.14.0

1 EDB exploit

Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base prior to 1.20.0 might allow context-dependent malicious users to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based...

Gnustep Gnustep Base 1.19.2 Gnustep Gnustep Base 1.19.0 Gnustep Gnustep Base 1.14.0 Gnustep Gnustep Base 1.12.0 Gnustep Gnustep Base Gnustep Gnustep Base 1.17.0 Gnustep Gnustep Base 1.15.4 Gnustep Gnustep Base 1.15.2 Gnustep Gnustep Base 1.15.1 Gnustep Gnustep Base 1.19.1 Gnustep Gnustep Base 1.18.0 Gnustep Gnustep Base 1.15.0 Gnustep Gnustep Base 1.13.0 Gnustep Gnustep Base 1.11.2

Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and previous versions, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote malicious users to cause a denial of service (abort) via an invalid request.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook