Unscored USN-4338-2 1 CVE

re2c vulnerability

Published Apr 28, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-4338-1 fixed vulnerabilities in re2c. This update provides
the corresponding update for Ubuntu 20.04 LTS.

Original advisory details:

Agostino Sarubbo discovered that re2c incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	re2c	1.3-1ubuntu0.1

Vulnerabilities 1

Unscored —

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.

re2c re2c re2c Debian Ubuntu Alpine

Apr 21, 2020

References

report
https://ubuntu.com/security/CVE-2020-11958