security flaw
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | |||
| slocate-0:2.7-3 | cpe:/o:redhat:enterprise_linux:3 | RHSA-2004:041 | 2004-01-26T00:00:00Z |
| Red Hat Linux 9 | |||
| cpe:/o:redhat:linux:9 | RHSA-2004:040 | 2004-01-22T00:00:00Z | |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2003-0839 | Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used. |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.987% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.