Summary
[5.1.0-6.1]
- Fix use after free in io.c
- Fix buffer overflow in extensions/readdir.c
- Fix integer overflow in buildin.c
Resolves: CVE-2026-40467
Resolves: CVE-2026-40468
Resolves: CVE-2026-40553
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gawk | 0:5.1.0-6.el9_8.1 |
| Oracle Linux · 9 | gawk-all-langpacks | 0:5.1.0-6.el9_8.1 |
Vulnerabilities 3
-
Medium 5.1
Use after free in gawk
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
-
Medium 5.1
Stack-based buffer overflow in gawk
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. I…
-
Low 2.1
Heap buffer overflow in gawk
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affect…