CVE-2019-11640: Buffer Overflow
Published May 1, 2019
·Updated
An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function recfexparsestrsimple at rec-fex.c in librec.a.
Affected Software
2 affected components
GNU recutils=1.8
debian/recutils<=1.8-1, <=1.9-2, <=1.9-3
Event History
May 1, 2019
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
Description
Dec 4, 2024
Data Sourced
via Launchpad·08:56 PM
Description
Dec 8, 2024
Data Sourced
via Ubuntu·08:56 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-11640?
CVE-2019-11640 has a high severity rating due to its potential for a heap-based buffer overflow.
2
How do I fix CVE-2019-11640?
To fix CVE-2019-11640, update GNU recutils to the latest version or apply any available patches for version 1.8.
3
Which versions of GNU recutils are affected by CVE-2019-11640?
GNU recutils version 1.8 is affected by CVE-2019-11640.
4
What is the impact of CVE-2019-11640 on systems using GNU recutils?
The impact of CVE-2019-11640 is a potential remote code execution due to the buffer overflow vulnerability.
5
Are there any mitigating factors for CVE-2019-11640?
Mitigating factors include restricting user inputs and employing runtime protection mechanisms like Address Space Layout Randomization (ASLR).