Slocate: >> Slocate >> 2.2 Security Vulnerabilities
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.
CVSS Score
2.1
EPSS Score
0.001
Published
2005-08-23
Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.
CVSS Score
4.6
EPSS Score
0.003
Published
2003-11-17