CVE-2019-6458: Medium severity gnu recutils vulnerability
An issue was discovered in GNU Recutils 1.8. There is a memory leak in recbufnew in rec-buf.c when called from recparserset in rec-parser.c in librec.a.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6458?
CVE-2019-6458 is classified with a medium severity due to the potential for memory leaks that can affect application performance.
How do I fix CVE-2019-6458?
To fix CVE-2019-6458, upgrade to a version of GNU Recutils that is patched against this vulnerability, ideally versions beyond 1.8.
What systems are affected by CVE-2019-6458?
CVE-2019-6458 affects GNU Recutils version 1.8 specifically, as well as its implementations in distributions like Debian.
What is the impact of CVE-2019-6458?
The impact of CVE-2019-6458 is primarily a memory leak that can lead to excessive memory usage and degraded performance in applications using GNU Recutils.
Is CVE-2019-6458 exploitable remotely?
CVE-2019-6458 does not present a direct remote code execution risk, but its memory leak can be exploited in environments where resources are constrained.