CVE-2019-20367CWE-125

CVE-2019-20367

Critical · published January 8, 2020

CVSS v3.1
9.1
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

⚠️ A puzzling out-of-bounds read could leave your symbols all jumbled up! If you're using libbsd before version 0.10.0, pay attention! Think of this like a librarian who misfiled a bunch of books. Instead of returning the correct title, that librarian accidentally hands you some random, unrelated tomes — that’s the risk of reading out of bounds! This vulnerability could lead to unexpected behavior or even crashes if your application attempts to access invalid memory locations. While this flaw is not currently exploited, it’s a sneaky little gremlin that could cause your system to act unpredictably, leaving you in a real bind.

Put simply

Think of this like a librarian who misfiled a bunch of books. Instead of returning the correct title, that librarian accidentally hands you some random, unrelated tomes — that’s the risk of reading out of bounds! Specifically, nlist.c in libbsd before 0.10.0 permits out-of-bounds reading during the comparison of a symbol name from the string table (strtab), potentially causing erratic behavior in your application.

What to do

This vulnerability could lead to unexpected behavior or even crashes if your application attempts to access invalid memory locations. While this flaw is not currently exploited, it’s a sneaky little gremlin that could cause your system to act unpredictably, leaving you in a real bind. To safeguard your systems, upgrade to libbsd version 0.10.0 or later immediately. Additionally, review your code for any other potential out-of-bounds reads that could lead to vulnerabilities. Always test your applications after updates to ensure everything runs smoothly! You've got this! By taking these steps, you’re reinforcing your defenses like a superhero fortifying their base! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02870 · 86.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-01-08T22:15Z
Affected products (8)
ProductVersionsFixed in
freedesktop/libbsd< 0.10.00.10.0
debian/debian_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
opensuse/leapall versions—
References (15)
https://gitlab.freedesktop.org/libbsd/libbsd/commit/9d917aad37778a9f4a96ba358415f077f3f36f3b · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r0e913668380f59bcbd14fdd8ae8d24f95f99995e290cd18a7822c6e5%40%3Cdev.tomee.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/ra781e51cf1ec40381c98cddc073b3576fb56c3978f4564d2fa431550%40%3Cdev.tomee.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/02/msg00027.html · af854a3a-2127-422b-91ae-364da2661108https://lists.freedesktop.org/archives/libbsd/2019-August/000229.html · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4243-1/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttp://lists.opensuse.org/opensuse-security-announce/2020-05/msg00043.html · [email protected]https://gitlab.freedesktop.org/libbsd/libbsd/commit/9d917aad37778a9f4a96ba358415f077f3f36f3b · [email protected]https://lists.apache.org/thread.html/r0e913668380f59bcbd14fdd8ae8d24f95f99995e290cd18a7822c6e5%40%3Cdev.tomee.apache.org%3E · [email protected]https://lists.apache.org/thread.html/ra781e51cf1ec40381c98cddc073b3576fb56c3978f4564d2fa431550%40%3Cdev.tomee.apache.org%3E · [email protected]https://lists.debian.org/debian-lts-announce/2021/02/msg00027.html · [email protected]https://lists.freedesktop.org/archives/libbsd/2019-August/000229.html · [email protected]https://usn.ubuntu.com/4243-1/ · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00043.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 08 JAN 16:50Z
    nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab)
    cvelistv5