objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aspell-develUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Alpine Linux | — | Upgrade aspell | Mar 26, 2024 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade aspell-develUpgrade aspell-debuginfoUpgrade aspell | Aug 9, 2023 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade aspellUpgrade aspell-debugsourceUpgrade aspell-debuginfo | May 13, 2022 | Jul 20, 2021 |
| Debian | — | Upgrade aspell | Jul 27, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade app-text/aspell. | Feb 27, 2024 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade aspell-develUpgrade aspell | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade aspellUpgrade aspell-debuginfoUpgrade aspell-debugsourceUpgrade aspell-develNo solution exists | May 13, 2022 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade aspell-debuginfoUpgrade aspellUpgrade aspell-debugsourceUpgrade aspell-devel | May 20, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade aspellUpgrade aspell-ispellUpgrade libpspell15-32bitUpgrade aspell-32bitUpgrade aspell-spellUpgrade libpspell15Upgrade libaspell15-32bitUpgrade aspell-develUpgrade libaspell15 | Aug 13, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade aspellUpgrade libaspell15Upgrade aspell (Ubuntu Pro)Upgrade libaspell15 (Ubuntu Pro) | Jul 27, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub