The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cvs | Jul 30, 2024 | Aug 6, 2004 |
| Freebsd | — | Upgrade cvs+ipv6Upgrade FreeBSD | Dec 10, 2025 | Aug 17, 2004 |
| Gentoo Linux | — | Upgrade dev-util/cvs. | Oct 30, 2017 | Aug 6, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub