Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
CVSS 2.0LOW 2.1·Local·No auth·Interaction —·EPSS 0.00411·Published 2012-08-13·Will not fixCWE-119
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
CVSS 2.0LOW 1.9·Local·No auth·Interaction —·EPSS 0.00477·Published 2012-08-13·Will not fixCWE-264
