CVE-2020-14150

GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash)

published June 15, 2020

CVSS
—
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.4th percentile
Published
2020-06-15T16:52Z
EPSS history
Timeline
  • 15 JUN 16:52Z
    GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash)
    cvelistv5