CVE-2014-9748

The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.

Affected products

Alt Linux, Libuv

Libuv

< 1.7.4

Fix

Available

CVSS 3.1

8.1 HIGH

EPSS

2.5% (83th percentile)

Weakness

CWE-362

NVD status

Modified

Published

2020-02-11

No exploit for CVE-2014-9748 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.