CVE-2019-20367 — Out-of-bounds Read in Libbsd

CWE-125 — Out-of-bounds Read10 documents7 sources
Severity
9.1CRITICALNVD
OSV9.8
EPSS
0.9%
top 24.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Freedesktop LibbsdDebian LibbsdCanonical Ubuntu Linux+2 more
Timeline
PublishedJan 8
Latest updateDec 14

Description

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages5 packages

▶debiandebian/libbsd< libbsd 0.10.0-1 (bookworm)
▶NVDfreedesktop/libbsd< 0.10.0
▶Debianfreedesktop/libbsd< 0.10.0-1+3
▶Ubuntufreedesktop/libbsd< 0.8.2-1ubuntu0.1+2
▶NVDopensuse/leap15.1

Also affects: Debian Linux 9.0, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 19.04

🔴Vulnerability Details

3
GHSA
GHSA-mc9f-fv52-p544: nlist↗2022-05-24
▶
OSV
libbsd vulnerabilities↗2020-01-20
▶
OSV
CVE-2019-20367: nlist↗2020-01-08
▶

📋Vendor Advisories

3
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1↗2023-12-14
▶
Ubuntu
libbsd vulnerabilities↗2020-01-20
▶
Debian
CVE-2019-20367: libbsd - nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison fo...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-20367 libbsd: Out-of-bounds read in nlist.c [epel-all]↗2020-01-09
▶
Bugzilla
CVE-2019-20367 libbsd: Out-of-bounds read in nlist.c [fedora-all]↗2020-01-09
▶
Bugzilla
CVE-2019-20367 libbsd: Out-of-bounds read in nlist.c↗2020-01-09
▶