ALT-PU-2020-3306-1
Closed vulnerabilities
Published: 2019-10-13
BDU:2020-01343
Уязвимость компонента libaspell.a программы проверки орфографии GNU Aspell, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
Severity: CRITICAL (9.1)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References:
Published: 2020-01-27
BDU:2020-02855
Уязвимость компонента libaspell.a программы проверки орфографии GNU Aspell, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
Severity: CRITICAL (9.1)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References:
Published: 2019-10-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
Severity: CRITICAL (9.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References:
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16109
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16109
- https://github.com/GNUAspell/aspell/commit/80fa26c74279fced8d778351cff19d1d8f44fe4e
- https://github.com/GNUAspell/aspell/commit/80fa26c74279fced8d778351cff19d1d8f44fe4e
- https://github.com/GNUAspell/aspell/compare/rel-0.60.7...rel-0.60.8
- https://github.com/GNUAspell/aspell/compare/rel-0.60.7...rel-0.60.8
- [debian-lts-announce] 20191019 [SECURITY] [DLA 1966-1] aspell security update
- [debian-lts-announce] 20191019 [SECURITY] [DLA 1966-1] aspell security update
- [debian-lts-announce] 20210725 [SECURITY] [DLA 2720-1] aspell security update
- [debian-lts-announce] 20210725 [SECURITY] [DLA 2720-1] aspell security update
- USN-4155-1
- USN-4155-1
- USN-4155-2
- USN-4155-2
- DSA-4948
- DSA-4948
Published: 2020-01-27
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-20433
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
Severity: CRITICAL (9.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References:
Closed bugs
Собрать свежую версию