CVE-2001-1036: GNU Findutils

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Affected products

• GNU Findutils: version 4.0 only; version 4.1 only
• Slackware Slackware Linux: version 7.1 only; version 8.0 only

Published 2001-08-31. Last modified 2026-06-16.