10 matches found
Security update for gawk
This update for gawk fixes the following issue: CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...
CVE-2026-40468
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below...
CVE-2026-40469
Integer overflow vulnerability has been found in "builtin.c" program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below...
EUVD-2026-43494
Integer overflow vulnerability has been found in "builtin.c" program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below...
CVE-2026-40468
The CVE-2026-40468 entry concerns gawk (versions 5.4.0 and earlier) with an integer overflow in the builtin.c file. The flaw can cause memory exhaustion and may enable overwriting heap metadata and objects with attacker-controlled bytes. This is described across multiple feeds (NVD/NIST entry and...
A heap out-of-bounds read flaw was found in builtin.c in the gawk package
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...
CLSA-2025-1751619853 gawk: Fix of CVE-2023-4156
CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage...
jq 资源管理错误漏洞
jq is a lightweight and flexible command-line JSON processor from jqlang open source. A resource management error vulnerability exists in jq version 1.8.0, which stems from a post-release reuse issue in the function fstrflocaltime in the file /src/builtin.c. The vulnerability is caused by the use...
AZL-30045 CVE-2023-4156 affecting package gawk for versions less than 5.1.1-1
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...