REDHAT-BUG-2414683: Use After Free
The gettext command is registered in the gettext module during load. However, the command is not unregistered at the module unload. So, this may lead to use-after-free issue when the gettext command is invoked after the gettext module unload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2414683?
The severity of REDHAT-BUG-2414683 is categorized as medium due to the potential for a use-after-free vulnerability.
How do I fix REDHAT-BUG-2414683?
To fix REDHAT-BUG-2414683, it is recommended to update the GNU gettext package to the latest patched version provided by the vendor.
What causes the vulnerability in REDHAT-BUG-2414683?
The vulnerability in REDHAT-BUG-2414683 is caused by the gettext command not being unregistered during the gettext module unload.
Which software is affected by REDHAT-BUG-2414683?
GNU gettext is the primary software affected by REDHAT-BUG-2414683.
What is a use-after-free issue in relation to REDHAT-BUG-2414683?
A use-after-free issue in REDHAT-BUG-2414683 can occur when the gettext command is executed after the gettext module has been unloaded, potentially leading to undefined behavior.