CVE-2019-20367: Critical severity Freedesktop Libbsd vulnerability
Last updated 25 August 2025
Other sources
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libbsdto a version that resolves this vulnerability.Fixed in 0.11.7-2Fixed in 0.12.2-2Fixed in 0.12.2-3 - Upgrade
Upgrade
libbsdto a version that resolves this vulnerability.Fixed in 0.10.0
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-20367.
What is the severity of CVE-2019-20367?
The severity of CVE-2019-20367 is critical with a score of 9.1.
What is the description of CVE-2019-20367?
CVE-2019-20367 is an out-of-bounds read vulnerability in libbsd before version 0.10.0.
How does CVE-2019-20367 affect the affected software?
CVE-2019-20367 affects libbsd versions 0.9.1-2+deb10u1, 0.11.3-1+deb11u1, 0.11.7-2, 0.11.7-4, 0.8.7-1ubuntu0.1, 0.9.1-2ubuntu0.1, 0.6.0-2ubuntu1+, 0.10.0-1, and 0.8.2-1ubuntu0.1.
How can I fix CVE-2019-20367?
To fix CVE-2019-20367, you should update libbsd to version 0.10.0 or higher, as it has been patched to address this vulnerability.