Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.
| Software | From | Fixed in |
|---|---|---|
| kevin_lindsay / secure_locate | 1.4 | 1.4.x |
| kevin_lindsay / secure_locate | 1.5 | 1.5.x |
| kevin_lindsay / secure_locate | 1.6 | 1.6.x |
| kevin_lindsay / secure_locate | 2.0 | 2.0.x |
| kevin_lindsay / secure_locate | 2.1 | 2.1.x |
| kevin_lindsay / secure_locate | 2.2 | 2.2.x |