CVE-2014-2980 Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of se...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnustep-base(Debian:12) | < 1.24.6-1 | 1.24.6-1 |
| debian/gnustep-base(Debian:13) | < 1.24.6-1 | 1.24.6-1 |
| debian/gnustep-base(Debian:14) | < 1.24.6-1 | 1.24.6-1 |
| gnustep base | <= 1.24.6 | No fix listed |
References
- Debian Security Tracker CVE-2014-2980 vendor-advisory
- [oss-security] 20140419 CVE request / advisory: gdomap (GNUstep core package <= 1.24.6) mailing-list
- [oss-security] 20140421 Re: CVE request / advisory: gdomap (GNUstep core package <= 1.24.6) mailing-list
- 58104 third-party-advisory vendor-advisory
- svn.gna.org
- svn.gna.org exploit patch
- 66992 vdb-entry
- gnustep-cve20142980-dos(92688) vdb-entry
- savannah.gnu.org
- bugs.debian.org issue-tracking