The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade aspell | Jul 30, 2024 | Jan 27, 2020 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.8-11.4.21.0.1.69.0 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 27, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 27, 2020 |
| Suse | — | Upgrade php72-gmpUpgrade php53-wddxUpgrade php53-mbstringUpgrade php72-imapUpgrade php72-odbcUpgrade php72-ctypeUpgrade php72-fastcgiUpgrade php72-mysqlUpgrade php72-bcmathUpgrade php53-odbcUpgrade php72-opcacheUpgrade php53-bz2Upgrade php72-snmpUpgrade php72-exifUpgrade php53-calendarUpgrade php53-gettextUpgrade php72Upgrade php72-xmlrpcUpgrade php53-bcmathUpgrade php53-suhosinUpgrade php72-readlineUpgrade php72-pgsqlUpgrade php72-tidyUpgrade php72-xmlwriterUpgrade php53-soapUpgrade php53-sysvsemUpgrade php53-curlUpgrade php72-socketsUpgrade php72-zlibUpgrade php72-sodiumUpgrade php72-xmlreaderUpgrade php53-pspellUpgrade php72-shmopUpgrade php72-sysvmsgUpgrade php53-ldapUpgrade php53-mysqlUpgrade php72-iconvUpgrade libpspell15Upgrade php53-iconvUpgrade apache2-mod_php53Upgrade php53-ftpUpgrade php72-gettextUpgrade php53-pgsqlUpgrade php53-fastcgiUpgrade php72-sysvsemUpgrade php53-gdUpgrade php53-shmopUpgrade php53-zipUpgrade php72-fpmUpgrade php53-xmlreaderUpgrade php53-gmpUpgrade php72-curlUpgrade php72-posixUpgrade php53-sysvmsgUpgrade aspell-develUpgrade php72-pspellUpgrade php72-soapUpgrade php53-xslUpgrade php53-zlibUpgrade php53-tokenizerUpgrade php53-xmlrpcUpgrade php72-gdUpgrade php72-mbstringUpgrade php53-jsonUpgrade php72-ldapUpgrade aspellUpgrade php53-xmlwriterUpgrade php72-pharUpgrade php72-pcntlUpgrade php72-ftpUpgrade php72-domUpgrade php53-exifUpgrade php53-pearUpgrade php72-pear-archive_tarUpgrade apache2-mod_php72Upgrade php72-dbaUpgrade php53-domUpgrade php72-pearUpgrade php53-opensslUpgrade php53-sysvshmUpgrade php72-zipUpgrade php72-sqliteUpgrade php53-intlUpgrade php72-tokenizerUpgrade aspell-ispellUpgrade php72-fileinfoUpgrade php53-pcntlUpgrade php53-pdoUpgrade libaspell15Upgrade php53-snmpUpgrade php72-calendarUpgrade php72-opensslUpgrade php72-intlUpgrade php53-mcryptUpgrade php53Upgrade php53-fileinfoUpgrade php72-xslUpgrade php72-develUpgrade php53-ctypeUpgrade libaspell15-32bitUpgrade php72-pdoUpgrade php53-dbaUpgrade php72-wddxUpgrade php72-bz2Upgrade php72-enchantUpgrade php72-sysvshmUpgrade php72-json | Feb 19, 2020 | Jan 27, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub