CVE-2002-0175: Avaya Libsafe

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Affected products

• Avaya Libsafe: version 1.3.4 only; version 1.3.8 only; version 2.0.2 only; version 2.0.5 only; version 2.0.9 only; version 2.0.10 only; …

Published 2002-04-22. Last modified 2026-06-16.