CVE-2019-11637: Null Pointer Dereference
Published May 1, 2019
·Updated
An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash.
Affected Software
2 affected components
GNU recutils=1.8
debian/recutils<=1.8-1, <=1.9-2, <=1.9-3
Event History
May 1, 2019
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
Description
Dec 4, 2024
Data Sourced
via Launchpad·08:56 PM
Description
Dec 8, 2024
Data Sourced
via Ubuntu·08:56 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-11637?
CVE-2019-11637 is classified with a severity that may lead to application crashes due to a NULL pointer dereference.
2
How do I fix CVE-2019-11637?
To fix CVE-2019-11637, upgrade GNU recutils to a version later than 1.8 that addresses this vulnerability.
3
What software is affected by CVE-2019-11637?
CVE-2019-11637 affects GNU recutils version 1.8 and potentially other packages using this version on Debian.
4
What is the impact of CVE-2019-11637?
The impact of CVE-2019-11637 is application instability leading to crashes when certain functions are invoked.
5
Is there a workaround for CVE-2019-11637 until it is patched?
There is no official workaround for CVE-2019-11637, so upgrading to a safe version is recommended.