objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aspell-develUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Alpine Linux | — | Upgrade aspell | Mar 26, 2024 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade aspell-debuginfoUpgrade aspell-develUpgrade aspell | Aug 9, 2023 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade aspell-debuginfoUpgrade aspell-debugsourceUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Debian | — | Upgrade aspell | Jul 27, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade app-text/aspell. | Feb 27, 2024 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade aspellUpgrade aspell-devel | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | — | No solution existsUpgrade aspell-debugsourceUpgrade aspell-develUpgrade aspell-debuginfoUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade aspell-debuginfoUpgrade aspellUpgrade aspell-debugsourceUpgrade aspell-devel | May 20, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade aspell-32bitUpgrade aspell-spellUpgrade aspellUpgrade aspell-ispellUpgrade libpspell15-32bitUpgrade aspell-develUpgrade libaspell15-32bitUpgrade libpspell15Upgrade libaspell15 | Aug 13, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade aspell (Ubuntu Pro)Upgrade libaspell15Upgrade aspellUpgrade libaspell15 (Ubuntu Pro) | Jul 27, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub