Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade texinfo | Jul 30, 2024 | Nov 8, 2006 |
| Gentoo Linux | — | Upgrade sys-apps/texinfo. | Oct 30, 2017 | Nov 8, 2006 |
| Oracle Solaris | — | Upgrade text/texinfo to version 4.13-0.175.1.16.0.1.0 on Solaris 11.1 | May 29, 2017 | Nov 8, 2006 |
| Suse | — | Upgrade texinfo | Feb 17, 2015 | Nov 8, 2006 |
| Ubuntu | — | Upgrade texinfo | Nov 8, 2024 | Nov 8, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub