CVE-2014-2980
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.7 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%
Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnustep:base | gnustep base | le | 1.24.6 |
References
seclists.org/oss-sec/2014/q2/143
seclists.org/oss-sec/2014/q2/152
secunia.com/advisories/58104
svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756
svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756
www.securityfocus.com/bid/66992
exchange.xforce.ibmcloud.com/vulnerabilities/92688
savannah.gnu.org/bugs/?41751
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.7 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.8%