CVE-2019-17544

Description

libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.

Affected packages (5)

• Alpine/aspellfrom 0, < 0.60.6.1-r14
• Debian/aspellfrom 0, < 0.60.8-1
• Debian/aspellfrom 0, < 0.60.7~20110707-1.3+deb8u1
• Debian/aspellfrom 0, < 0.60.7~20110707-3+deb9u1
• Debian/aspellfrom 0, < 0.60.7~20110707-6+deb10u1

CVSS scores

References (2)

• ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2019-17544
• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2019-17544