CVE-2019-20433
Fixed in a distro release EPSS 2%
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
Products: gnu aspell
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | aspell | 0.60.7-3 |
| Debian 13 | aspell | 0.60.7-3 |
| Debian 14 | aspell | 0.60.7-3 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | php72 | 7.2.5-1.37.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | php53 | 5.3.17-112.79.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | php53 | 5.3.17-112.79.1 |
| SUSE Linux Enterprise Server 12 SP5 | aspell | 0.60.6.1-18.8.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | aspell | 0.60.6.1-18.8.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | php72 | 7.2.5-1.37.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | aspell | 0.60.6.1-18.8.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | php72 | 7.2.5-1.37.1 |
| Ubuntu 18.04 LTS | aspell | no fix |
| Ubuntu Pro 14.04 LTS | aspell | no fix |
| Ubuntu Pro 16.04 LTS | aspell | no fix |