Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU findutils Locate数据库本地堆溢出漏洞
Vulnerability Description
GNU findutils是一套用于搜索Unix类系统上文件的程序。 findutils在处理数据库时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 findutils支持三种不同格式的locate数据库，分别为原始格式LOCATE02、LOCATE02的slocate变种和传统格式。当locate从默认格式的LOCATE02数据库读取文件名时，会自动扩展读入数据的缓冲区以适合文件名的长度，但传统格式的数据库没有执行这种自动缓冲区扩展，而是使用了1026字节的缓冲区。如果locate数据库存在超长的路径
CVSS Information
N/A
Vulnerability Type
N/A