Home

CVE-2019-16707

Description

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.53

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:3971) hunspell security update hunspell-1.3.2-16.el7.i686.rpmLinux
(RHSA-2020:3971) hunspell security update hunspell-1.3.2-16.el7.x86_64.rpmLinux
(RHSA-2020:3971) hunspell security update hunspell-devel-1.3.2-16.el7.i686.rpmLinux
(RHSA-2020:3971) hunspell security update hunspell-devel-1.3.2-16.el7.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-32bit-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-debuginfo-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-debuginfo-32bit-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-debugsource-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-tools-1.3.2-19.3.1.x86_64.rpmLinux
SUSE-SU-2020:2967-1(SUSE Linux Enterprise Server 12-SP5 ) hunspell-tools-debuginfo-1.3.2-19.3.1.x86_64.rpmLinux
(CESA-2020:3971) hunspell security update hunspell-1.3.2-16.el7.x86_64.rpmLinux
(CESA-2020:3971) hunspell security update hunspell-devel-1.3.2-16.el7.x86_64.rpmLinux
(RHSA-2020:3971)Low: security update hunspell-debuginfo-1.3.2-16.el7.i686.rpmLinux
(RHSA-2020:3971)Low: security update hunspell-debuginfo-1.3.2-16.el7.x86_64.rpmLinux
Hunspell update (ELSA-2020-3971) hunspell-1.3.2-16.el7.i686.rpmLinux
Hunspell update (ELSA-2020-3971) hunspell-1.3.2-16.el7.x86_64.rpmLinux
Hunspell-devel update (ELSA-2020-3971) hunspell-devel-1.3.2-16.el7.i686.rpmLinux
Hunspell-devel update (ELSA-2020-3971) hunspell-devel-1.3.2-16.el7.x86_64.rpmLinux
hunspell Security Update (ALAS-2020-1518) hunspell-1.3.2-16.amzn2.i686.rpmLinux
hunspell Security Update (ALAS-2020-1518) hunspell-1.3.2-16.amzn2.x86_64.rpmLinux
hunspell Security Update (ALAS-2020-1518) hunspell-devel-1.3.2-16.amzn2.x86_64.rpmLinux
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-16707)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234