Summary
It was discovered that recutils incorrectly handled memory when parsing
comments with the recparser utility. An attacker could possibly use this
issue to cause a denial of service or run arbitrary commands.
(CVE-2021-46019, CVE-2021-46021, CVE-2021-46022)
It was discovered that recutils incorrectly handled memory when parsing CSV
files. An attacker could possibly use this issue to cause a denial of
service or run arbitrary commands. (CVE-2019-11637, CVE-2019-11638,
CVE-2019-11639, CVE-2019-11640)
It was discovered that recutils incorrectly handled memory when parsing
maliciously crafted recfiles. An attacker could possibly use this issue to
cause a denial of service. (CVE-2019-6455, CVE-2019-6456, CVE-2019-6457,
CVE-2019-6458, CVE-2019-6459, CVE-2019-6460)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | recutils | 1.7-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | recutils | 1.7-2ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | recutils | 1.8-1ubuntu0.20.04.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | recutils | 1.8-1ubuntu0.22.04.1~esm1 |
Vulnerabilities 13
-
Unscored —
An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_rset_get_props at …
-
Unscored —
An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_field_name_equal_p…
-
Unscored —
An issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the function rec_type_check_enum…
-
Unscored —
An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function rec_fex_parse_str_si…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in …
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the …
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in libr…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_pa…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() i…
-
Unscored —
An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fau…
-
Unscored —
An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentat…
-
Unscored —
An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmenta…
References
-
report
https://ubuntu.com/security/CVE-2019-6455
-
report
https://ubuntu.com/security/CVE-2019-6456
-
report
https://ubuntu.com/security/CVE-2019-6457
-
report
https://ubuntu.com/security/CVE-2019-6458
-
report
https://ubuntu.com/security/CVE-2019-6459
-
report
https://ubuntu.com/security/CVE-2019-6460
-
report
https://ubuntu.com/security/CVE-2019-11637
-
report
https://ubuntu.com/security/CVE-2019-11638
-
report
https://ubuntu.com/security/CVE-2019-11639
-
report
https://ubuntu.com/security/CVE-2019-11640
-
report
https://ubuntu.com/security/CVE-2021-46019
-
report
https://ubuntu.com/security/CVE-2021-46021
-
report
https://ubuntu.com/security/CVE-2021-46022