CVE-2019-16166: Medium severity gnu cflow vulnerability
Published Sep 9, 2019
·Updated
GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
Affected Software
1 affected component
GNU cflow<=1.6
Event History
Sep 9, 2019
CVE Published
via MITRE·03:37 PM
Data Sourced
via MITRE·03:37 PM
Description
Frequently Asked Questions
1
What is CVE-2019-16166?
CVE-2019-16166 is a vulnerability found in GNU cflow through 1.6 that allows a heap-based buffer over-read in the nexttoken function in parser.c.
2
How severe is CVE-2019-16166?
CVE-2019-16166 has a severity value of 6.5, which is considered medium.
3
What software is affected by CVE-2019-16166?
The affected software is GNU cflow version 1.6.
4
How can I fix CVE-2019-16166?
To fix CVE-2019-16166, update GNU cflow to a version higher than 1.6.
5
Where can I find more information about CVE-2019-16166?
You can find more information about CVE-2019-16166 at the following link: [https://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.html](https://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.html)