An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gettextUpgrade gettext-develUpgrade gettext-libsUpgrade gettext-common-devel | May 4, 2022 | Oct 29, 2018 |
| Alpine Linux | — | Upgrade gettext | Aug 22, 2024 | Oct 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade emacs-gettextUpgrade gettext-common-develUpgrade gettext-debuginfoUpgrade gettext-libsUpgrade gettextUpgrade gettext-devel | Aug 25, 2020 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 28, 2018 |
| Centos_linux | — | Upgrade gettextUpgrade gettext-libs-debuginfoUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-debuginfoUpgrade gettext-devel-debuginfoUpgrade emacs-gettextUpgrade gettext-debugsourceUpgrade gettext-devel | Nov 6, 2019 | Oct 29, 2018 |
| Debian | — | Upgrade gettext | Jul 30, 2024 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-devel | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gettext-libsUpgrade gettextUpgrade gettext-develUpgrade gettext-common-devel | Nov 19, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-devel | Sep 24, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettext-libsUpgrade gettext | Sep 30, 2019 | Oct 29, 2018 |
| Oracle Solaris | — | Upgrade text/gnu-gettext to version 0.20.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade emacs-gettextUpgrade gettext-develUpgrade gettext-common-develUpgrade gettextUpgrade gettext-libs | Oct 5, 2022 | Oct 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 29, 2018 |
| Redhat_linux | — | Upgrade gettext-debugsourceUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-develUpgrade gettext-debuginfoUpgrade gettextNo solution existsUpgrade gettext-devel-debuginfoUpgrade emacs-gettextUpgrade gettext-libs-debuginfo | Nov 6, 2019 | Oct 29, 2018 |
| Rocky_linux | — | Upgrade gettext-devel-debuginfoUpgrade gettext-debugsourceUpgrade gettext-libsUpgrade gettext-libs-debuginfoUpgrade gettextUpgrade gettext-develUpgrade gettext-debuginfo | Mar 12, 2024 | Oct 29, 2018 |
| Suse | — | Upgrade gettext-csharpUpgrade gettext-javaUpgrade gettext-toolsUpgrade gettext-runtime-mini-tools-docUpgrade gettext-runtime-miniUpgrade gettext-tools-miniUpgrade gettext-runtimeUpgrade gettext-runtime-32bitUpgrade gettext-runtime-tools-doc | Aug 28, 2020 | Oct 29, 2018 |
| Ubuntu | — | Upgrade gettext | Nov 15, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub