objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aspellUpgrade aspell-devel | May 13, 2022 | Jul 20, 2021 |
| Alpine Linux | — | Upgrade aspell | Mar 26, 2024 | Jul 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade aspell-debuginfoUpgrade aspell-develUpgrade aspell | Aug 9, 2023 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade aspell-debugsourceUpgrade aspell-debuginfoUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Debian | — | Upgrade aspell | Jul 27, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade app-text/aspell. | Feb 27, 2024 | Jul 20, 2021 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade aspell-develUpgrade aspell | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade aspell-debuginfoNo solution existsUpgrade aspell-develUpgrade aspell-debugsourceUpgrade aspell | May 13, 2022 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade aspell-develUpgrade aspell-debugsourceUpgrade aspell-debuginfoUpgrade aspell | May 20, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libaspell15-32bitUpgrade libaspell15Upgrade libpspell15Upgrade aspell-develUpgrade aspell-ispellUpgrade aspell-32bitUpgrade aspellUpgrade libpspell15-32bitUpgrade aspell-spell | Aug 13, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade aspellUpgrade libaspell15Upgrade aspell (Ubuntu Pro)Upgrade libaspell15 (Ubuntu Pro) | Jul 27, 2021 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub