libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade aspell | Jul 30, 2024 | Jan 27, 2020 |
| Oracle Solaris | — | Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.21.0.1.69.0 on Solaris 11.4Upgrade text/aspell to version 0.60.8-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 27, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 27, 2020 |
| Suse | — | Upgrade php72-jsonUpgrade apache2-mod_php72Upgrade php53-xmlrpcUpgrade php72-enchantUpgrade php53-xslUpgrade php53-zlibUpgrade php53-dbaUpgrade libaspell15-32bitUpgrade aspellUpgrade php53-tokenizerUpgrade php53-snmpUpgrade php53-ctypeUpgrade php72-pear-archive_tarUpgrade php72-develUpgrade php72-fileinfoUpgrade php72-dbaUpgrade php72-pdoUpgrade php72-ftpUpgrade libaspell15Upgrade php72-tokenizerUpgrade php72-opensslUpgrade php72-calendarUpgrade php53-pcntlUpgrade php72-zipUpgrade php53-pdoUpgrade php72-pearUpgrade php53-jsonUpgrade php53-domUpgrade php72-ldapUpgrade php53-intlUpgrade php53-opensslUpgrade aspell-ispellUpgrade php72-sqliteUpgrade php72-pharUpgrade php53-sysvshmUpgrade php72-pcntlUpgrade php72-gdUpgrade php72-bz2Upgrade php72-domUpgrade php53-fileinfoUpgrade php53-pearUpgrade php72-xslUpgrade php53-mcryptUpgrade php72-intlUpgrade php72-wddxUpgrade php72-sysvshmUpgrade php72-mbstringUpgrade php53Upgrade php53-xmlwriterUpgrade php53-exifUpgrade php72-fastcgiUpgrade php53-suhosinUpgrade php53-gdUpgrade php72-opcacheUpgrade php72-mysqlUpgrade php53-odbcUpgrade php72-socketsUpgrade php53-curlUpgrade php72-snmpUpgrade php53-zipUpgrade php53-pspellUpgrade php53-bcmathUpgrade php72-bcmathUpgrade php53-gettextUpgrade apache2-mod_php53Upgrade php53-sysvsemUpgrade php72-readlineUpgrade php53-ldapUpgrade php53-mysqlUpgrade php72-gmpUpgrade php53-mbstringUpgrade php72-zlibUpgrade php53-xmlreaderUpgrade php72-gettextUpgrade php72-fpmUpgrade php72-sysvmsgUpgrade php72-shmopUpgrade php53-wddxUpgrade php53-ftpUpgrade php72-odbcUpgrade php72-imapUpgrade php72-pspellUpgrade aspell-develUpgrade libpspell15Upgrade php72-curlUpgrade php72-exifUpgrade php72-soapUpgrade php72-iconvUpgrade php72-pgsqlUpgrade php72-sysvsemUpgrade php72-tidyUpgrade php53-calendarUpgrade php53-bz2Upgrade php53-iconvUpgrade php72-posixUpgrade php53-gmpUpgrade php72-xmlreaderUpgrade php53-pgsqlUpgrade php72Upgrade php72-xmlwriterUpgrade php53-soapUpgrade php72-xmlrpcUpgrade php72-ctypeUpgrade php72-sodiumUpgrade php53-fastcgiUpgrade php53-shmopUpgrade php53-sysvmsg | Feb 19, 2020 | Jan 27, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub