Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft和OpenBSD libc库fts函数本地拒绝服务漏洞
Vulnerability Description
fts函数是libc库中用于遍历UNIX文件多级结构的函数。 src/lib/libc/gen/fts.c的fts_build()函数在处理深层嵌套的目录时存在整数溢出漏洞。特制的目录数可以触发分段错误,导致使用fts例程(如rm、du、chgrp、chown等)的应用程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A