Lucene search
+L

202 matches found

OSV
OSV
•added 2021/07/20 7:15 a.m.•14 views

AZL-11363 CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.4AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/20 7:15 a.m.•27 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS0.00549EPSS
SaveExploits0References6
OSV
OSV
•added 2021/07/20 7:15 a.m.•43 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.1AI score
SaveExploits0References6
Prion
Prion
•added 2021/07/20 7:15 a.m.•34 views

Heap overflow

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

4.6CVSS7.7AI score0.00549EPSS
SaveExploits0References6Affected Software3
UbuntuCve
UbuntuCve
•added 2021/07/20 7:15 a.m.•36 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.3AI score0.00549EPSS
SaveExploits0References5
OSV
OSV
•added 2021/07/20 7:15 a.m.•8 views

UBUNTU-CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.4AI score0.00549EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2021/07/20 6:46 a.m.•46 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.7AI score0.00549EPSS
SaveExploits0
CVE
CVE
•added 2021/07/20 6:46 a.m.•502 views

CVE-2019-25051

CVE-2019-25051 affects GNU Aspell 0.60.8 and is caused by a heap-based buffer overflow in acommon::ObjStack::dup_top (invoked from acommon::StringMap::add and acommon::Config::lookup_list). The connected advisories confirm this issue and note security updates/patches are available across multiple...

7.8CVSS7.7AI score0.00549EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2021/07/20 6:46 a.m.•31 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.9AI score0.00549EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2021/07/20 6:46 a.m.•56 views

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS8AI score0.00549EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•3 views

CVE-2019-25051: Out-of-bounds Write

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS6AI score0.00549EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•6 views

GNU Aspell 缓冲区错误漏洞

GNU Aspell is a spell checker. A security vulnerability exists in GNU Aspell that stems from having a heap-based buffer overflow...

7.8CVSS7.6AI score0.00549EPSS
SaveExploits0References18
Rosalinux
Rosalinux
•added 2021/07/02 4:32 p.m.•37 views

Advisory ROSA-SA-2021-1806

Software: aspell 0.60.6.1 OS: Cobalt 7.9 CVE-ID: CVE-2019-20433 CVE-Crit: CRITICAL CVE-DESC: libaspell.a in GNU Aspell before 0.60.8 has a buffer reread for a string ending with one byte '\ 0' if the encoding is set to ucs-2 or ucs-4 outside the application. , as shown by the ASPELLCONF environme...

9.1CVSS7.2AI score0.01739EPSS
SaveExploits0
Veracode
Veracode
•added 2021/07/01 7:18 a.m.•27 views

Denial Of Service (DoS)

Aspell is vulnerable to denial of service. A buffer over-read for a string ending with a single \0 when the encoding is set to ucs-2 or ucs-4 outside of the application results in an application crash...

9.1CVSS3.3AI score0.01739EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2020:2807-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.4AI score0.01739EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2019:3034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.9AI score0.03259EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/12/09 12:00 a.m.•26 views

SUSE SLES12 Security Update : aspell (SUSE-SU-2020:2807-1)

This update for aspell fixes the following security issue : CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982. Note that Tenable Network Security has extracted the preceding description block directly from the...

9.1CVSS7.6AI score0.01739EPSS
SaveExploits0References4
OSV
OSV
•added 2020/09/30 12:36 p.m.•13 views

SUSE-SU-2020:2807-1 Security update for aspell

This update for aspell fixes the following security issue: - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982...

9.1CVSS9.4AI score0.01739EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/06/19 12:00 a.m.•14 views

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

9.4CVSS7.2AI score0.01739EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/06 12:00 a.m.•19 views

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

9.4CVSS7.1AI score0.03259EPSS
SaveExploits0References10Affected Software4
Rows per page
Query Builder