CVE-2014-4043 in C Library
Сводка (Английский)
The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Резервировать
12.06.2014
Раскрытие
06.10.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 13587 | GNU C Library spawn_faction_addopen.c xc_cpupool_getinfo эскалация привилегий | 94 | Доказательство концепции | Официальное исправление | CVE-2014-4043 |