CVE-2019-16395

Name of the Vulnerable Software and Affected Versions GnuCOBOL version 2.2

Description The issue is related to a stack-based buffer overflow in the cb name() function, located in the cobc/tree.c file. This overflow can be triggered by crafted COBOL source code.

Recommendations For GnuCOBOL version 2.2, consider restricting the use of the cb name() function until a patch is available. As a temporary workaround, avoid using crafted COBOL source code that may exploit this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.