Description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ed | 0.7-2 | — |
| Debian 13 | ed | 0.7-2 | — |
| Debian 12 | ed | 0.7-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | ed | 0.2-39.el5_2 | RHSA-2008:0946 |
| RHEL 4 | ed | 0.2-36.el4_7.1 | RHSA-2008:0946 |
| RHEL 3 | ed | 0.2-33.30E.1 | RHSA-2008:0946 |
| RHEL 2 | ed | 0.2-21.1 | RHSA-2008:0946 |
Advisories 1
- RHSA-2008:0946 Red Hat Security Advisory: ed security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 43068 third-party-advisory
- ADV-2008-3347 vdb-entry
- oval:org.mitre.oval:def:10678 vdb-entry signature
- RHSA-2008:0946 vendor-advisory
- ADV-2011-0212 vdb-entry
- 38794 third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- 30815 vdb-entry
- FEDORA-2008-9263 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm
- gnued-stripescapes-bo(44643) vdb-entry
- ADV-2008-2642 vdb-entry
- FEDORA-2008-9236 vendor-advisory
- [bug-ed] 20080821 Version 1.0 of GNU ed released mailing-list
- MDVSA-2008:200 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0003.html
- 33005 third-party-advisory
- SUSE-SR:2011:002 vendor-advisory
- 1020734 vdb-entry
- 20090227 VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed mailing-list
- 32349 third-party-advisory
- GLSA-200809-15 vendor-advisory
- 32460 third-party-advisory
- ADV-2010-0528 vdb-entry