GNU Findutils vulnerabilities

2 CVEs affecting GNU Findutils, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2452, published 2007-06-04.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-2452, published 2007-06-04. Medium severity, CVSS 6.0. EPSS: 2.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long…
• CVE-2001-1036, published 2001-08-31. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which…