An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gettext-common-develUpgrade gettextUpgrade gettext-libsUpgrade gettext-devel | May 4, 2022 | Oct 29, 2018 |
| Alpine Linux | — | Upgrade gettext | Aug 22, 2024 | Oct 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade gettext-libsUpgrade gettext-debuginfoUpgrade gettext-develUpgrade gettextUpgrade gettext-common-develUpgrade emacs-gettext | Aug 25, 2020 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 28, 2018 |
| Centos_linux | — | Upgrade gettext-devel-debuginfoUpgrade gettext-debugsourceUpgrade gettext-develUpgrade emacs-gettextUpgrade gettext-debuginfoUpgrade gettext-libs-debuginfoUpgrade gettext-common-develUpgrade gettextUpgrade gettext-libs | Nov 6, 2019 | Oct 29, 2018 |
| Debian | — | Upgrade gettext | Jul 30, 2024 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-devel | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gettext-develUpgrade gettext-libsUpgrade gettextUpgrade gettext-common-devel | Nov 19, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gettext-develUpgrade gettext-common-develUpgrade gettext-libsUpgrade gettext | Sep 24, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettextUpgrade gettext-libs | Sep 30, 2019 | Oct 29, 2018 |
| Oracle Solaris | — | Upgrade text/gnu-gettext to version 0.20.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade gettext-libsUpgrade gettextUpgrade gettext-common-develUpgrade gettext-develUpgrade emacs-gettext | Oct 5, 2022 | Oct 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 29, 2018 |
| Redhat_linux | — | Upgrade gettext-libs-debuginfoUpgrade gettext-devel-debuginfoNo solution existsUpgrade emacs-gettextUpgrade gettextUpgrade gettext-common-develUpgrade gettext-develUpgrade gettext-libsUpgrade gettext-debugsourceUpgrade gettext-debuginfo | Nov 6, 2019 | Oct 29, 2018 |
| Rocky_linux | — | Upgrade gettext-devel-debuginfoUpgrade gettext-libsUpgrade gettext-libs-debuginfoUpgrade gettextUpgrade gettext-debugsourceUpgrade gettext-debuginfoUpgrade gettext-devel | Mar 12, 2024 | Oct 29, 2018 |
| Suse | — | Upgrade gettext-csharpUpgrade gettext-javaUpgrade gettext-runtimeUpgrade gettext-runtime-miniUpgrade gettext-runtime-mini-tools-docUpgrade gettext-toolsUpgrade gettext-tools-miniUpgrade gettext-runtime-tools-docUpgrade gettext-runtime-32bit | Aug 28, 2020 | Oct 29, 2018 |
| Ubuntu | — | Upgrade gettext | Nov 15, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub