[bug-recutils] [bug #55556] CVE-2019-6460

[Luigi Baldoni]

URL:
  <https://savannah.gnu.org/bugs/?55556>

                 Summary: CVE-2019-6460
                 Project: GNU recutils
            Submitted by: aloysius
            Submitted on: Wed 23 Jan 2019 04:24:08 PM CET
                Category: librec
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

There is a NULL pointer dereference in the function rec_field_set_name() in
the file rec-field.c in librec.a.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6460
http://www.cvedetails.com/cve/CVE-2019-6460/

PoC:
https://github.com/TeamSeri0us/pocs/tree/master/recutils




    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?55556>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/