Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gnustep-base-common",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "gnustep-base-doc",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "gnustep-base-examples",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "gnustep-base-runtime",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "gnustep-base-runtime-dbgsym",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "libgnustep-base-dev",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "libgnustep-base-dev-dbgsym",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "libgnustep-base1.24",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "libgnustep-base1.24-dbg",
"binary_version": "1.24.7-1build2"
},
{
"binary_name": "libgnustep-base1.24-dbgsym",
"binary_version": "1.24.7-1build2"
}
]
}