Unity Linux 20.1060e / 20.1070e Security Update: aspell (UTSA-2026-017553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017553 advisory. libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. Tenable has...

CVE-2019-25051 affecting package aspell 0.60.8-5

CVE-2019-25051 affecting package aspell 0.60.8-5. This CVE either no longer is or was never applicable...

GLSA-202402-31 : GNU Aspell: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202402-31 GNU Aspell: Heap Buffer Overflow - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist. CVE-2019-25051 Note that...

CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7

CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7. A patched version of the package is available...

AlmaLinux 8 : aspell (ALSA-2022:1808)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:1808 advisory. - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

aspell: Heap-buffer-overflow in acommon::ObjStack::dup_top

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

SUSE SLED12: aspell / aspell-devel / aspell-ispell / libaspell15 / etc (SUSE-SU-2021:2848-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2848-1 advisory. - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:duptop bsc1188576. Tenable has extracted the preceding description...

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

AZL-11363 CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

CVE-2019-25051

CVE-2019-25051 affects GNU Aspell 0.60.8 and is caused by a heap-based buffer overflow in acommon::ObjStack::dup_top (invoked from acommon::StringMap::add and acommon::Config::lookup_list). The connected advisories confirm this issue and note security updates/patches are available across multiple...

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

GNU Aspell libaspell.a Buffer Overflow Vulnerability

GNU Aspell is a spell checker. A buffer overflow vulnerability exists in the libaspell.a file in versions of GNU Aspell prior to 0.60.8. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

Fedora 30 : 12:aspell (2019-73919e71f8)

Rebase to upstream version 0.60.8, that fixes potential security flaw. ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

GNU Aspell Buffer Overflow Vulnerability

GNU Aspell is a free, open source spell checker. A stack buffer overflow vulnerability exists in acommon::unescape in common/getdata.cpp in libaspell.a in versions prior to GNU Aspell 0.60.8, which can be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...