CVE-2019-19918 - Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c · CoreCVE

Back Back to CVE browser

HIGH

Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c

Published Dec 20, 2019

7.8

HIGH

CVSS 3.1

EPSS 1.60%

Description

Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (9)

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00068.html
vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00069.html
vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00010.html
vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00011.html
vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9509
Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/
vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEJVEIQMRXJ26ZT6657W5RYH7YECVGNB/
vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGZKTKGRJTQE43SFU77X5QJHKXTTOJYB/
vendor-advisoryx_refsource_FEDORA
https://lists.gnu.org/archive/html/lout-users/2019-12/msg00001.html
x_refsource_MISCExploitMailing ListThird Party Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00068.html		vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00069.html		vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00010.html		vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00011.html		vendor-advisoryx_refsource_SUSEBroken LinkThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9509		Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/		vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEJVEIQMRXJ26ZT6657W5RYH7YECVGNB/		vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGZKTKGRJTQE43SFU77X5QJHKXTTOJYB/		vendor-advisoryx_refsource_FEDORA
https://lists.gnu.org/archive/html/lout-users/2019-12/msg00001.html		x_refsource_MISCExploitMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 20, 2019

Updated Aug 5, 2024

Reserved Dec 20, 2019

Link CVE-2019-19918

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19918

Severity n/a

Public date n/a

Links CVE-2019-19918

Assigner mitre

Published Dec 20, 2019

Updated Aug 5, 2024

Exploited since n/a

Link EUVD-2019-9509