CVE-2014-3980

Published: Jun 11, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors.

Affected (5)

Products: Daiki Ueno: Libfep

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Daiki Ueno Libfep	Version 0.0.5
Daiki Ueno Libfep	Version 0.0.6
Daiki Ueno Libfep	Version 0.0.7
Daiki Ueno Libfep	Version 0.0.8
Daiki Ueno Libfep	Version 0.0.9

Related CWEs

References (8)

http://www.openwall.com/lists/oss-security/2014/06/05/16

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2014/06/06/11

Source: secalert@redhat.com

http://www.securityfocus.com/bid/67903

Source: secalert@redhat.com

https://github.com/ueno/libfep/commit/293d9d3f

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2014/06/05/16

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/06/06/11

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67903

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/ueno/libfep/commit/293d9d3f

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.