漏洞信息详情
GNU gettext 资源管理错误漏洞
漏洞简介
GNU gettext是GNU计划开发(Gnu计划开发)的一款开源的用于编写多语言程序的软件包。
GNU gettext 0.19.8版本中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源(如内存、磁盘空间、文件等)的管理不当。
漏洞公告
目前厂商暂未发布修复措施解决此安全问题,建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法:
https://www.gnu.org/software/gettext/
参考网址
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:3643
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html
来源:UBUNTU
链接:https://usn.ubuntu.com/3815-1/
来源:MISC
链接:https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree
来源:UBUNTU
链接:https://usn.ubuntu.com/3815-2/
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html
来源:MISC
链接:https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:3643
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3700/
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/48710
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158031/Red-Hat-Security-Advisory-2020-2485-01.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-event-streams-is-affected-by-gnu-gettext-vulnerability-cve-2018-18751/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158353/Red-Hat-Security-Advisory-2020-2846-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2332/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4155/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-gnu-gettext-affects-ibm-spectrum-protect-plus-cve-2018-18751-4/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-gnu-gettext-affects-ibm-spectrum-protect-plus-cve-2018-18751/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155146/Red-Hat-Security-Advisory-2019-3643-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2029/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-gnu-gettext-affects-ibm-spectrum-protect-plus-cve-2018-18751-3/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-gnu-gettext-affects-ibm-spectrum-protect-plus-cve-2018-18751-2/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.1183/
来源:www-01.ibm.com
链接:https://www-01.ibm.com/support/docview.wss?uid=ibm10876556
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159727/Red-Hat-Security-Advisory-2020-4298-01.html
受影响实体
- Gnu Gettext:0.19.8<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...