NVD

Id
32096  
Name
CVE-2014-4043  
Description
The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-06  
Modified Date
2016-04-06  
Seq
2014-4043  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168861 32096 CVE-2014-4043 openSUSE-SU-2015:1387  View
168862 32096 CVE-2014-4043 MDVSA-2014:152  View
168863 32096 CVE-2014-4043 68006  View
168864 32096 CVE-2014-4043 gnuclibrary-cve20144043-code-exec(93784)  View
168865 32096 CVE-2014-4043 https://bugzilla.redhat.com/show_bug.cgi?id=1109263  View
168866 32096 CVE-2014-4043 https://sourceware.org/bugzilla/show_bug.cgi?id=17048  View
168867 32096 CVE-2014-4043 https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=blobdiff;f=ChangeLog;h=3020b9ac232315df362521aeaf85f21cb9926db8;hp=d86e73963dd9fb5e21b1a28326630337226812aa;hb=89e435f3559c53084498e9baad22172b64429362;hpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845  View
168868 32096 CVE-2014-4043 https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=blobdiff;f=posix/spawn_faction_addopen.c;h=40800b8e6e81341501c0fb8a91009529e2048dec;hp=47f62425b696a4fdd511b2a057746322eb6518db;hb=89e435f3559c53084498e9baad22172b64429362;hpb=c3a2ebe1f7541cc35937621e08c28ff88afd0845  View
168869 32096 CVE-2014-4043 https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=89e435f3559c53084498e9baad22172b64429362  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15693 JVNDB-2014-004568 GNU C Library の posix_spawn_file_actions_addopen 関数における解放済みメモリの使用を誘発される脆弱性 GNU C Library (別名 glibc) の posix_spawn_file_actions_addopen 関数は、POSIX 規格に従って path 引数をコピーしないため、解放済みメモリの使用 (Use-after-free) を誘発される脆弱性が存在します。 CVE-2014-4043 71331 CVE-2014-4043 32096 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004568.html 2014-06-11 2014-10-08 View