CVE-2014-4043 in C Library

Resumen (Inglés)

The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2014-06-12

Divulgación

2014-10-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
13587	GNU C Library spawn_faction_addopen.c xc_cpupool_getinfo escalada de privilegios	94	Prueba de concepto	Arreglo oficial	CVE-2014-4043

Fuentes

• MITRE
• NVD
• CVE Details