debian/libbsd vulnerabilities

Latest debian/libbsd CVEs

Newest publication first

1. DLA-2566-1 libbsd - security update

   Published 2021-02-18

   Unknown

2. CVE-2019-20367 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

   Published 2020-01-08

   Critical·CVSS 9.1

   nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

3. DLA-2052-1 libbsd - security update

   Published 2019-12-30

   Unknown

4. CVE-2016-2090 Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

   Published 2017-01-13

   Critical·CVSS 9.8

   Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.