PT-2014-1916
CVE-2014-2980
·
تاريخ النشر
2014-04-28
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
gnustep-base versions prior to 1.24.6
Description
The issue is related to the improper handling of the file descriptor for the logger in the gdomap component of GNUstep Base. This can be exploited remotely, potentially leading to a denial of service. The exploitation may cause the service to abort when an invalid request is received.
Recommendations
For versions prior to 1.24.6, update to version 1.24.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the gdomap service to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾