Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gnustep-base-common",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-doc",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-examples",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "gnustep-base-runtime",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base-dev",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base1.24",
"binary_version": "1.24.0-1ubuntu3"
},
{
"binary_name": "libgnustep-base1.24-dbg",
"binary_version": "1.24.0-1ubuntu3"
}
]
}