PT-2019-18099 · Gnu+3 · Gnu Recutils+3
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Recutils version 1.8
Description
An issue was discovered in GNU Recutils. There is a NULL pointer dereference in the function rec fex size() in the file rec-fex.c of librec.a.
Recommendations
For GNU Recutils version 1.8, consider avoiding the use of the rec fex size() function until a patch is available. As a temporary workaround, restrict access to the librec.a library to minimize the risk of exploitation.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Gnu Recutils
Linuxmint
Ubuntu