CVE-2001-0066: Kevin Lindsay Secure Locate

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.

Affected products

• Kevin Lindsay Secure Locate: version 1.4 only; version 1.5 only; version 1.6 only; version 2.0 only; version 2.1 only; version 2.2 only

Published 2001-02-16. Last modified 2026-06-16.