p PatchFirst

CVE-2018-20374

CVE-2018-20374

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the use_section1 function in tccasm.c.

CVSS 5.5 · Medium · EPSS 0.7%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tcc Debian:12

    Versions
    • 0.9.27+git20200814.62c30a4a-1
    • 0.9.27+git20200814.62c30a4a-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Debian:13

    Versions
    • 0.9.27+git20200814.62c30a4a-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:16.04:LTS

    Versions
    • 0.9.27~git20140923.9d7fb33-3ubuntu1
    • 0.9.27~git20151227.933c223-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:18.04:LTS

    Versions
    • 0.9.27~git20161217.cd9514ab-3ubuntu1
    • 0.9.27-2
    • 0.9.27-4
    • 0.9.27-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:20.04:LTS

    Versions
    • 0.9.27-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:22.04:LTS

    Versions
    • 0.9.27+git20200814.62c30a4a-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:24.04:LTS

    Versions
    • 0.9.27+git20200814.62c30a4a-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:25.10

    Versions
    • 0.9.27+git20200814.62c30a4a-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:26.10

    Versions
    • 0.9.27+git20200814.62c30a4a-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tcc Ubuntu:26.04:LTS

    Versions
    • 0.9.27+git20200814.62c30a4a-2
    • 0.9.27+git20200814.62c30a4a-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →