CVE-2019-19917

The CVE-2019-19917/19918 issues affect Lout 3.40. CVE-2019-19917 is a buffer overflow in StringQuotedWord() (z39.c); CVE-2019-19918 is a buffer overflow in srcnext() (z02.c). Several connected advisories confirm these two buffer-overflow vulnerabilities and document patches/updates to fix them (e...

CVE-2019-19918

CVE-2019-19918 affects Lout 3.40. It is a heap-based buffer overflow in srcnext() (z02.c). OpenSUSE/Mageia/Fedora advisories confirm CVE-2019-19918 and also CVE-2019-19917 (StringQuotedWord() overflow). Patches/updates have been released for affected distros (e.g., lout package updates in Fedora/...