CVE-2026-40467 Use after free in gawk

Use After Free vulnerability has been found in "io.c" program file of gawk dogetlineredir routine. This issue may lead to a crash. It affects gawk in versions 5.4.0 and below...

CVE-2026-40467

CVE-2026-40467 is a use-after-free in the gawk project. The issue occurs in the io.c file within the do_getline_redir() routine and affects gawk versions 5.4.0 and earlier. The vulnerability can cause a crash due to a dangling pointer, per the public descriptions. Connected sources confirm the co...

Linux Distros Unpatched Vulnerability : CVE-2026-40469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow vulnerability has been found in builtin.c program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and...

Linux Distros Unpatched Vulnerability : CVE-2026-40467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability has been found in io.c program file of gawk dogetlineredir routine. This issue may lead to a crash. It affects gawk in versions 5.4...

PT-2026-57815

Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier Description A buffer overflow occurs in the ftype routine within the extension/readdir.c file. This flaw can lead to a program crash and potentially allow for arbitrary code execution. Recommendations Update gaw...

Linux Distros Unpatched Vulnerability : CVE-2026-40553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability has been found in extension/readdir.c program file of gawk ftype routine. This issue could be used to crash the program and...

PT-2026-57814

Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier 32-bit builds Description An integer overflow exists in the do sub routine within the builtin.c file. This flaw allows for the overwriting of heap metadata and objects, which can lead to a program crash. An...

PT-2026-57812

Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier Description A Use After Free issue exists in the io.c file within the do getline redir function. This flaw can result in a program crash. Use After Free is a memory corruption flaw that occurs when an applicatio...

Linux Distros Unpatched Vulnerability : CVE-2026-40468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow vulnerability has been found in builtin.c program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and...

Astra Linux – Vulnerability in gawk

A heap out-of-bounds read flaw was discovered in the builtin.c file within the gawk package. This issue may lead to a crash and could be used to read sensitive information...

CLSA-2026-1777888717 gawk: Fix of CVE-2023-4156

Fix CVE-2023-4156: builtin.c formattree: When collecting positional field widths or precisions, check for wrap around to negative values...

CLSA-2026-1777030298 gawk: Fix of CVE-2023-4156

CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage...

EUVD-2023-54036

Malicious code in bioql PyPI...

Security update for busybox, busybox-links

This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 jscPED-13039: CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncsprintf.c bsc1217580 CVE-2023-42364: Fixed use-after-free in the awk.c evaluate function bsc1217584...

CLSA-2025-1751619853 gawk: Fix of CVE-2023-4156

CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage...

Linux Distros Unpatched Vulnerability : CVE-2023-4156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...

Photon OS 4.0: Gawk PHSA-2023-4.0-0488

An update of the gawk package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0488. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : gawk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gawk: heap out of bound read in builtin.c CVE-2023-4156 Note that Nessus has not tested for this issue but has...

RHEL 8 : gawk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gawk: heap out of bound read in builtin.c CVE-2023-4156 Note that Nessus has not tested for this issue but has...

RHEL 6 : gawk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gawk: heap out of bound read in builtin.c CVE-2023-4156 Note that Nessus has not tested for this issue but has...