CVE-2005-2499: Slocate

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.

Affected products

• Slocate Slocate: version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; version 2.6 only

Published 2005-08-23. Last modified 2026-06-16.