CVE-2019-11638: Null Pointer Dereference
An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recfieldnameequalp at rec-field-name.c in librec.a, leading to a crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11638?
CVE-2019-11638 has been classified as a moderate severity vulnerability due to its ability to cause a crash through NULL pointer dereference.
How do I fix CVE-2019-11638?
To fix CVE-2019-11638, upgrade GNU Recutils to version 1.9 or later, as the vulnerability is resolved in these versions.
What systems are affected by CVE-2019-11638?
CVE-2019-11638 affects GNU Recutils version 1.8 as well as certain Debian packages of Recutils up to version 1.9-3.
What type of vulnerability is CVE-2019-11638?
CVE-2019-11638 is categorized as a NULL pointer dereference vulnerability, leading to application crashes.
What are the potential impacts of CVE-2019-11638?
The potential impact of CVE-2019-11638 includes application instability and crashes, which may disrupt services relying on GNU Recutils.