Gentoo Linux Security Advisory GLSA 200504-14 – Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a double expansion error in monkeyd, resulting in a format string vulnerability. Ciaran McCreesh of Gentoo Linux discovered a Denial of Service vulnerability, a syntax error caused monkeyd to zero out unallocated memory should a zero byte file be requested. Versions less than 0.9.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37234/glsa-200504-14.txt
Source: https://packetstormsecurity.com/files/37234/Gentoo-Linux-Security-Advisory-200504-14.html