CVE-2014-4043
published 2014-10-06CVE-2014-4043: The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows…
high7.5CVSS 3.1
AVNACLAuNCPIPAP
The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glibc | < glibc 2.19-2 (bookworm) | glibc 2.19-2 (bookworm) |
| eglibc | eglibc | >= 0 < 2.19-0ubuntu6.1 | 2.19-0ubuntu6.1 |
| gnu | glibc | <= 2.19 | — |
| gnu | glibc | >= 0 < 2.19-2 | 2.19-2 |
| gnu | glibc | >= 0 < 2.19-2 | 2.19-2 |
| gnu | glibc | >= 0 < 2.19-2 | 2.19-2 |
| gnu | glibc | >= 0 < 2.19-2 | 2.19-2 |
| opensuse | opensuse | — | — |
CVSS provenance
nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH