An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-develUpgrade gettext-common-devel | May 4, 2022 | Oct 29, 2018 |
| Alpine Linux | — | Upgrade gettext | Aug 22, 2024 | Oct 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade gettext-debuginfoUpgrade gettext-develUpgrade gettextUpgrade gettext-libsUpgrade gettext-common-develUpgrade emacs-gettext | Aug 25, 2020 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 28, 2018 |
| Centos_linux | — | Upgrade gettext-debugsourceUpgrade gettext-devel-debuginfoUpgrade gettext-develUpgrade emacs-gettextUpgrade gettext-debuginfoUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-libs-debuginfoUpgrade gettext | Nov 6, 2019 | Oct 29, 2018 |
| Debian | — | Upgrade gettext | Jul 30, 2024 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettextUpgrade gettext-libs | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-develUpgrade gettext-common-devel | Nov 19, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gettext-libsUpgrade gettextUpgrade gettext-common-develUpgrade gettext-devel | Sep 24, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettext-libsUpgrade gettext | Sep 30, 2019 | Oct 29, 2018 |
| Oracle Solaris | — | Upgrade text/gnu-gettext to version 0.20.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade gettext-libsUpgrade gettextUpgrade gettext-develUpgrade gettext-common-develUpgrade emacs-gettext | Oct 5, 2022 | Oct 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 29, 2018 |
| Redhat_linux | — | Upgrade gettext-libs-debuginfoNo solution existsUpgrade emacs-gettextUpgrade gettext-devel-debuginfoUpgrade gettext-debuginfoUpgrade gettext-common-develUpgrade gettext-debugsourceUpgrade gettext-libsUpgrade gettext-develUpgrade gettext | Nov 6, 2019 | Oct 29, 2018 |
| Rocky_linux | — | Upgrade gettext-devel-debuginfoUpgrade gettext-libs-debuginfoUpgrade gettext-debugsourceUpgrade gettextUpgrade gettext-libsUpgrade gettext-debuginfoUpgrade gettext-devel | Mar 12, 2024 | Oct 29, 2018 |
| Suse | — | Upgrade gettext-runtime-32bitUpgrade gettext-runtime-tools-docUpgrade gettext-toolsUpgrade gettext-runtimeUpgrade gettext-runtime-miniUpgrade gettext-javaUpgrade gettext-runtime-mini-tools-docUpgrade gettext-tools-miniUpgrade gettext-csharp | Aug 28, 2020 | Oct 29, 2018 |
| Ubuntu | — | Upgrade gettext | Nov 15, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub