CVE-2023-4156
Fixed in a distro release EPSS <1%CVSS 4.4
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.
Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gawk | 1:5.2.1-1 |
| Debian 13 | gawk | 1:5.2.1-1 |
| Debian 14 | gawk | 1:5.2.1-1 |
| SUSE Linux Enterprise Micro 5.1 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Micro 5.2 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Micro 5.3 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Micro 5.4 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | gawk | 4.1.0-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gawk | 4.1.0-5.3.1 |
| SUSE Manager Proxy 4.2 | gawk | 4.2.1-150000.3.3.1 |
| SUSE Manager Server 4.2 | gawk | 4.2.1-150000.3.3.1 |
| Ubuntu 20.04 LTS | gawk | 1:5.0.1+dfsg-1ubuntu0.1 |
| Ubuntu 22.04 LTS | gawk | 1:5.1.0-1ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | gawk | 1:4.0.1+dfsg-2.1ubuntu2+esm1 |
| Ubuntu Pro 16.04 LTS | gawk | 1:4.1.3+dfsg-0.1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | gawk | 1:4.1.4+dfsg-1ubuntu0.1~esm1 |
| openSUSE Leap 15.4 | gawk | 4.2.1-150000.3.3.1 |
| openSUSE Leap 15.5 | gawk | 4.2.1-150000.3.3.1 |
| openSUSE Leap Micro 5.3 | gawk | 4.2.1-150000.3.3.1 |
| openSUSE Leap Micro 5.4 | gawk | 4.2.1-150000.3.3.1 |