objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aspellalma-upgrade-aspell-devel | May 13, 2022 | Jul 20, 2021 | |
| Alpine Linux | alpine-linux-upgrade-aspell | Mar 26, 2024 | Jul 20, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-aspellamazon-linux-ami-2-upgrade-aspell-debuginfoamazon-linux-ami-2-upgrade-aspell-devel | Aug 9, 2023 | Jul 20, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jul 20, 2021 | |
| Centos_linux | — | centos-upgrade-aspellcentos-upgrade-aspell-debuginfocentos-upgrade-aspell-debugsource | May 13, 2022 | Jul 20, 2021 |
| Debian | debian-upgrade-aspell | Jul 27, 2021 | Jul 20, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-aspell | Feb 27, 2024 | Jul 20, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-text-aspell-0-60-8-11-4-37-0-1-101-1oracle-solaris-11-4-upgrade-text-aspell-dictionary-en-0-60-8-11-4-37-0-1-101-1 | Oct 12, 2021 | Jul 20, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-aspelloracle-linux-upgrade-aspell-devel | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | redhat-upgrade-aspellredhat-upgrade-aspell-debuginforedhat-upgrade-aspell-debugsourceredhat-upgrade-aspell-devel | May 13, 2022 | Jul 20, 2021 | |
| Rocky_linux | rocky-upgrade-aspellrocky-upgrade-aspell-debuginforocky-upgrade-aspell-debugsourcerocky-upgrade-aspell-devel | May 20, 2022 | Jul 20, 2021 | |
| Suse | — | suse-upgrade-aspellsuse-upgrade-aspell-32bitsuse-upgrade-aspell-develsuse-upgrade-aspell-ispellsuse-upgrade-aspell-spellsuse-upgrade-libaspell15suse-upgrade-libaspell15-32bitsuse-upgrade-libpspell15suse-upgrade-libpspell15-32bit | Aug 13, 2021 | Jul 20, 2021 |
| Ubuntu | ubuntu-pro-upgrade-aspellubuntu-pro-upgrade-libaspell15ubuntu-upgrade-aspellubuntu-upgrade-libaspell15 | Jul 27, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub