Skip to content
OpenAdvisories
Unscored RHSA-2009:1101 4 CVEs

Red Hat Security Advisory: cscope security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as cscope 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::as cscope-debuginfo 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::desktop cscope 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::desktop cscope-debuginfo 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::es cscope 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::es cscope-debuginfo 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::ws cscope 0:15.5-16.RHEL3
Red Hat · RHEL 3 enterprise_linux:3::ws cscope-debuginfo 0:15.5-16.RHEL3
Red Hat · RHEL 4 enterprise_linux:4::as cscope 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::as cscope-debuginfo 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cscope 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop cscope-debuginfo 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::es cscope 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::es cscope-debuginfo 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws cscope 0:15.5-10.RHEL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws cscope-debuginfo 0:15.5-10.RHEL4.3

Vulnerabilities 4

  • Unscored —

    Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via …

  • Unscored —

    Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash)…

  • Unscored —

    Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in i…

  • Unscored —

    Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted rem…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=203645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=499174
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1101.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-2541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-2541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-2541
  • report
    https://access.redhat.com/security/cve/CVE-2006-4262
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4262
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4262
  • report
    https://access.redhat.com/security/cve/CVE-2009-0148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0148
  • report
    https://access.redhat.com/security/cve/CVE-2009-1577
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1577
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1577