Threats tagged 'ghsa-gfv8-jx4x-32h7'

A vulnerability in libnv occurs when it uses select(2) to wait for data on a socket without verifying that the socket descriptor is within the FD_SETSIZE limit (1024). An attacker can exploit this by forcing the application to allocate large file descriptors, potentially causing stack corruption. If the affected application runs with setuid-root privileges, this flaw could lead to local privilege escalation.