Vulnerability in Slocate

CVE-2005-2499

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.

EPSS: 0.004 (30.1th percentile) — read the EPSS interpretation.

Affected products

  • Slocate — versions 2.1, 2.2, 2.3
  • N/a — versions n/a

References