Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade texinfo | Jul 30, 2024 | Nov 8, 2006 |
| Gentoo Linux | — | Upgrade sys-apps/texinfo. | Oct 30, 2017 | Nov 8, 2006 |
| Oracle Solaris | — | Upgrade text/texinfo to version 4.13-0.175.1.16.0.1.0 on Solaris 11.1 | May 29, 2017 | Nov 8, 2006 |
| Suse | — | Upgrade texinfo | Feb 17, 2015 | Nov 8, 2006 |
| Ubuntu | — | Upgrade texinfo | Nov 8, 2024 | Nov 8, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub