CVE-2014-2980
GNUstep Base < 1.24.6 - Denial of Service via Invalid Request Handling
Title source: llmDescription
Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/92688
Various Sources x_refsource_confirm
https://savannah.gnu.org/bugs/?41751
Exploit, Patch x_refsource_confirm
http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66992
Various Sources x_refsource_confirm
http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q2/152
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q2/143
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/58104
Scores
EPSS
0.0171
EPSS Percentile
74.6%
Details
CWE
CWE-20
Status
published
Products (1)
gnustep/base
< 1.24.6
Published
Apr 28, 2014
Tracked Since
Feb 18, 2026