Most recent entries from all

bdu:2023-05957

Withdrawn: BELL-CVE-2023-4156 — CVE-2023-4156 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0756

EUVD-2026-187489

fkie_cve-2023-4156

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

GHSA-8p8g-pp68-479w

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

gsd-2023-4156

msrc_CVE-2023-4156 — Heap out of bound read in builtin.c

msrc_CVE-2023-4156

OESA-2023-1575 — gawk security update

Affected: openEuler:20.03-LTS-SP1: gawk, openEuler:20.03-LTS-SP3: gawk, openEuler:22.03-LTS: gawk, openEuler:22.03-LTS-SP1: gawk, openEuler:22.03-LTS-SP2: gawk

The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fix(es): A heap out of bound read issue exists in builtin.c of gawk prior to version 5.1.1. The array "the_args" takes an unsafe index "val", while it does not validate the index to ensure the index refers to a valid position in the array (e.g., exceedingly large or negative). The vulnerability can cause crash of the software and might be used by attackers to read sensitive information. https://mail.gnu.org/archive/html/bug-gawk/2022-08/msg00000.html https://mail.gnu.org/archive/html/bug-gawk/2022-08/msg00023.html https://fossies.org/linux/gawk/ChangeLog#470 (Line: 470-475)(CVE-2023-4156)

UBUNTU-CVE-2023-4156

Affected: Ubuntu:Pro:14.04:LTS: gawk, Ubuntu:Pro:16.04:LTS: gawk, Ubuntu:Pro:18.04:LTS: gawk, Ubuntu:20.04:LTS: gawk, Ubuntu:22.04:LTS: gawk

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.