p PatchFirst

CVE-2019-14697

CVE-2019-14697

This page contains facts from public vulnerability sources. Check the original advisory before updating.

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

CVSS 9.8 · Critical · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • musl Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.23-2

    Update to 1.1.23-2

  • musl Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.23-2

    Update to 1.1.23-2

  • musl Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.23-2

    Update to 1.1.23-2

  • musl Ubuntu:Pro:14.04:LTS

    Versions
    • 0.9.14-2
    • 0.9.14-2ubuntu1
    • 0.9.15-1
    • 0.9.15-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: < 0.9.15-1ubuntu0.1~esm2

    Update to 0.9.15-1ubuntu0.1~esm2

  • musl Ubuntu:Pro:16.04:LTS

    Versions
    • 1.1.9-1
    • 1.1.9-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: < 1.1.9-1ubuntu0.1~esm3

    Update to 1.1.9-1ubuntu0.1~esm3

  • musl Ubuntu:Pro:18.04:LTS

    Versions
    • 1.1.16-3
    • 1.1.18-1
    • 1.1.19-1
    Affected ranges
    • ECOSYSTEM: < 1.1.19-1ubuntu0.1~esm1

    Update to 1.1.19-1ubuntu0.1~esm1

Original sources

Check your server →