CVE Catalog
CVE-2019-20367
CriticalCVSS 9.1Exploitation Probability (EPSS)
High risk2.81%
86th percentile - higher than 86% of all known CVEs
Summary
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Risk Assessment
The out-of-bounds read may lead to memory disclosure or a crash of applications using libbsd.
Recommendation
Update libbsd to version 0.10.0 or later.
Other vulnerabilities in libbsd
Original NVD description (English source)
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS