Unscored severity · published Aug 13, 2012
CVE-2011-0524
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GY
Gypsy · Iain
0.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0524
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0524
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html
Vendor Advisory
http://secunia.com/advisories/49991
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/01/24/10
More from Gypsy
–
CVE-2011-0523
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified…