Lucene search
+L

194 matches found

OSV
OSV
added 2021/07/20 7:15 a.m.39 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.1AI score
SaveExploits0References6
Prion
Prion
added 2021/07/20 7:15 a.m.30 views

Heap overflow

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

4.6CVSS7.7AI score0.00549EPSS
SaveExploits0References6Affected Software3
UbuntuCve
UbuntuCve
added 2021/07/20 7:15 a.m.34 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.3AI score0.00549EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/20 7:15 a.m.3 views

UBUNTU-CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.4AI score0.00549EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2021/07/20 6:46 a.m.42 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.7AI score0.00549EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/07/20 6:46 a.m.24 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.9AI score0.00549EPSS
SaveExploits0References6
CVE
CVE
added 2021/07/20 6:46 a.m.481 views

CVE-2019-25051

CVE-2019-25051 affects GNU Aspell 0.60.8 and is caused by a heap-based buffer overflow in acommon::ObjStack::dup_top (invoked from acommon::StringMap::add and acommon::Config::lookup_list). The connected advisories confirm this issue and note security updates/patches are available across multiple...

7.8CVSS7.7AI score0.00549EPSS
SaveExploits0References6Affected Software1
AlpineLinux
AlpineLinux
added 2021/07/20 6:46 a.m.49 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS8AI score0.00549EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.3 views

GNU Aspell 缓冲区错误漏洞

GNU Aspell is a spell checker. A security vulnerability exists in GNU Aspell that stems from having a heap-based buffer overflow...

7.8CVSS7.6AI score0.00549EPSS
SaveExploits0References18
Rosalinux
Rosalinux
added 2021/07/02 4:32 p.m.31 views

Advisory ROSA-SA-2021-1806

Software: aspell 0.60.6.1 OS: Cobalt 7.9 CVE-ID: CVE-2019-20433 CVE-Crit: CRITICAL CVE-DESC: libaspell.a in GNU Aspell before 0.60.8 has a buffer reread for a string ending with one byte '\ 0' if the encoding is set to ucs-2 or ucs-4 outside the application. , as shown by the ASPELLCONF environme...

9.1CVSS7.2AI score0.01739EPSS
SaveExploits0
Veracode
Veracode
added 2021/07/01 7:18 a.m.23 views

Denial Of Service (DoS)

Aspell is vulnerable to denial of service. A buffer over-read for a string ending with a single \0 when the encoding is set to ucs-2 or ucs-4 outside of the application results in an application crash...

9.1CVSS3.3AI score0.01739EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2020:2807-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.4AI score0.01739EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2019:3034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.9AI score0.03259EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.24 views

SUSE SLES12 Security Update : aspell (SUSE-SU-2020:2807-1)

This update for aspell fixes the following security issue : CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982. Note that Tenable Network Security has extracted the preceding description block directly from the...

9.1CVSS7.6AI score0.01739EPSS
SaveExploits0References4
OSV
OSV
added 2020/09/30 12:36 p.m.9 views

SUSE-SU-2020:2807-1 Security update for aspell

This update for aspell fixes the following security issue: - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982...

9.1CVSS9.4AI score0.01739EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:0 a.m.10 views

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

9.4CVSS7.2AI score0.01739EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.13 views

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

9.4CVSS7.1AI score0.03259EPSS
SaveExploits0References10Affected Software4
CNVD
CNVD
added 2020/02/21 12:0 a.m.4 views

GNU Aspell libaspell.a Buffer Overflow Vulnerability

GNU Aspell is a spell checker. A buffer overflow vulnerability exists in the libaspell.a file in versions of GNU Aspell prior to 0.60.8. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

9.1CVSS7.2AI score0.01739EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/27 3:15 p.m.22 views

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

9.1CVSS6.9AI score
SaveExploits0References1
OSV
OSV
added 2020/01/27 3:15 p.m.1 views

DEBIAN-CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

9.1CVSS7AI score0.01739EPSS
SaveExploits0References1
Rows per page
Query Builder