Unscored CVE-2014-3980 EUVD-2014-3913GHSA-cc74-6qmv-qhgj

libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges …

Published Jun 11, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors.

References

67903 vdb-entry
https://github.com/ueno/libfep/commit/293d9d3f
[oss-security] 20140603 [CVE request] Local privilege escalation in libfep mailing-list
[oss-security] 20140606 Re: [CVE request] Local privilege escalation in libfep mailing-list