Vulnerability Details CVE-2019-11638
An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_field_name_equal_p at rec-field-name.c in librec.a, leading to a crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils
- https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/rec2csv
- https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils
- https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/rec2csv