Skip to content
OpenAdvisories

Package · Azure Linux

gettext

1 known vulnerabilities.

1 result · Feed

  • High 7.0

    gettext: Directory traversal via the LANGUAGE environment variable

    The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid (AT_SECURE). An attacker who can set LANGUAGE in the env…