objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aspell-develUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Alpine Linux | — | Upgrade aspell | Mar 26, 2024 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade aspell-develUpgrade aspell-debuginfoUpgrade aspell | Aug 9, 2023 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade aspell-debugsourceUpgrade aspell-debuginfoUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Debian | — | Upgrade aspell | Jul 27, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade app-text/aspell. | Feb 27, 2024 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade aspellUpgrade aspell-devel | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade aspell-debugsourceUpgrade aspell-develNo solution existsUpgrade aspell-debuginfoUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade aspell-debugsourceUpgrade aspell-develUpgrade aspellUpgrade aspell-debuginfo | May 20, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade aspell-ispellUpgrade aspell-32bitUpgrade aspell-spellUpgrade aspellUpgrade libpspell15-32bitUpgrade libaspell15-32bitUpgrade libaspell15Upgrade aspell-develUpgrade libpspell15 | Aug 13, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade aspellUpgrade libaspell15Upgrade aspell (Ubuntu Pro)Upgrade libaspell15 (Ubuntu Pro) | Jul 27, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub