CVE-2019-6460

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfieldsetname in the file rec-field.c in librec.a...

CVE-2019-6457

CVE-2019-6457 affects GNU Recutils 1.8. The vulnerability is a memory leak in the function rec_aggregate_reg_new (in rec-aggregate.c) within the librec.a library. Public documentation consistently describes this as a memory-management issue in the Recutils codebase, without detailing any specific...

CVE-2019-6458

An issue was discovered in GNU Recutils 1.8. There is a memory leak in recbufnew in rec-buf.c when called from recparserset in rec-parser.c in librec.a...

CVE-2019-6455

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function recmsetelemdestroy in the file rec-mset.c...

CVE-2019-6458

An issue was discovered in GNU Recutils 1.8. There is a memory leak in recbufnew in rec-buf.c when called from recparserset in rec-parser.c in librec.a...

CVE-2019-6455

GNU Recutils 1.8 contains a double-free vulnerability in rec_mset_elem_destroy() within rec-mset.c (CVE-2019-6455). The OSV/ CNVD entries confirm the same issue; no exploit details or affected version ranges beyond 1.8 are provided in the connected documents. No patch/version remediation is speci...

CVE-2019-6457

An issue was discovered in GNU Recutils 1.8. There is a memory leak in recaggregateregnew in rec-aggregate.c in librec.a...

CVE-2019-6456

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfexsize in the file rec-fex.c of librec.a...

CVE-2019-6455

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function recmsetelemdestroy in the file rec-mset.c...

CVE-2019-6456

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfexsize in the file rec-fex.c of librec.a...

CVE-2019-6460

CVE-2019-6460 affects GNU Recutils 1.8. It is a NULL pointer dereference in rec_field_set_name() within librec.a (rec-field.c). The initial CVE record documents this as the underlying issue; exploitation details are not provided in the connected documents. CVSS data from the entry shows two vecto...

PT-2019-18099 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: An issue was discovered in GNU Recutils. There is a NULL pointer dereference in the function rec fex size in the file rec-fex.c of librec.a. Recommendations: For GNU Recutils version 1.8, consider avoidin...

PT-2019-18103 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: An issue was discovered in GNU Recutils. There is a NULL pointer dereference in the function rec field set name in the file rec-field.c in librec.a. Recommendations: For GNU Recutils version 1.8, consider...

PT-2019-18100 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: A memory leak was found in the rec aggregate reg new function in rec-aggregate.c within librec.a. Recommendations: For GNU Recutils version 1.8, consider updating to a newer version that addresses the...

PT-2019-18098 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: An issue was discovered in the function rec mset elem destroy in the file rec-mset.c, which has a double-free problem. Recommendations: For GNU Recutils version 1.8, consider avoiding the use of the rec...

Privilege Escalation

glibc is vulnerable to privilege escalation attacks. The vulnerability exists as elf/dl-load.c in the GNU C Library aka glibc or libc6 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged setuid or ATSECURE program, which allows local users to gain privileges via a...

Arbitrary Code Execution

grep is vulnerable to arbitrary code execution attacks. The vulnerability exists through multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow...

Remote Code Execution (RCE)

wget is vulnerable to remote code execution RCE attacks. The vulnerability exists as an absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response tha...

Arbitrary Code Execution

automake is vulnerable to arbitrary code execution attacks. The vulnerability exists as the "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to...

Privilege Escalation

gdb is vulnerable to privilege escalation attacks. The vulnerability exists as GNU Project Debugger GDB before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python...