An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettext-libsUpgrade gettext | May 4, 2022 | Oct 29, 2018 |
| Alpine Linux | — | Upgrade gettext | Aug 22, 2024 | Oct 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade emacs-gettextUpgrade gettext-common-develUpgrade gettext-libsUpgrade gettext-debuginfoUpgrade gettext-develUpgrade gettext | Aug 25, 2020 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 28, 2018 |
| Centos_linux | — | Upgrade gettext-devel-debuginfoUpgrade emacs-gettextUpgrade gettext-develUpgrade gettext-debugsourceUpgrade gettext-debuginfoUpgrade gettext-libsUpgrade gettext-common-develUpgrade gettext-libs-debuginfoUpgrade gettext | Nov 6, 2019 | Oct 29, 2018 |
| Debian | — | Upgrade gettext | Jul 30, 2024 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-develUpgrade gettext-common-devel | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gettext-common-develUpgrade gettextUpgrade gettext-develUpgrade gettext-libs | Nov 19, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gettext-common-develUpgrade gettext-develUpgrade gettext-libsUpgrade gettext | Sep 24, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gettextUpgrade gettext-libsUpgrade gettext-develUpgrade gettext-common-devel | Sep 30, 2019 | Oct 29, 2018 |
| Oracle Solaris | — | Upgrade text/gnu-gettext to version 0.20.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade gettext-develUpgrade emacs-gettextUpgrade gettext-common-develUpgrade gettext-libsUpgrade gettext | Oct 5, 2022 | Oct 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 29, 2018 |
| Redhat_linux | — | Upgrade gettext-debuginfoUpgrade gettext-libsUpgrade gettext-develUpgrade gettext-debugsourceUpgrade gettext-common-develUpgrade gettextUpgrade gettext-libs-debuginfoUpgrade emacs-gettextNo solution existsUpgrade gettext-devel-debuginfo | Nov 6, 2019 | Oct 29, 2018 |
| Rocky_linux | — | Upgrade gettext-libs-debuginfoUpgrade gettext-debugsourceUpgrade gettext-devel-debuginfoUpgrade gettext-libsUpgrade gettextUpgrade gettext-develUpgrade gettext-debuginfo | Mar 12, 2024 | Oct 29, 2018 |
| Suse | — | Upgrade gettext-toolsUpgrade gettext-csharpUpgrade gettext-runtime-miniUpgrade gettext-javaUpgrade gettext-tools-miniUpgrade gettext-runtimeUpgrade gettext-runtime-mini-tools-docUpgrade gettext-runtime-32bitUpgrade gettext-runtime-tools-doc | Aug 28, 2020 | Oct 29, 2018 |
| Ubuntu | — | Upgrade gettext | Nov 15, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub