The POSIX readdir_r function is susceptible to a race condition which could possibly be exploited to cause a buffer overflow.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41113/readdir.txt
Source: https://packetstormsecurity.com/files/41113/readdir.txt.html