CVE-2019-14871
CVE-2019-14871
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM, REENT_CHECK_MISC, REENT_CHECK_MP and other newlib macros in versions prior to 3.3.0, does not check for memory allocation problems when the DEBUG flag is unset (as is the case in production firmware builds).
CVSS 6.5 · Medium · EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
newlib
- Versions
- all newlib versions prior to 3.3.0: Affected
No fix published
newlib Debian:12
- Affected ranges
- ECOSYSTEM: < 3.3.0-1
Update to 3.3.0-1
newlib Debian:13
- Affected ranges
- ECOSYSTEM: < 3.3.0-1
Update to 3.3.0-1
newlib Debian:14
- Affected ranges
- ECOSYSTEM: < 3.3.0-1
Update to 3.3.0-1
picolibc Debian:12
- Affected ranges
- ECOSYSTEM: < 1.4.3-1
Update to 1.4.3-1
picolibc Debian:13
- Affected ranges
- ECOSYSTEM: < 1.4.3-1
Update to 1.4.3-1
picolibc Debian:14
- Affected ranges
- ECOSYSTEM: < 1.4.3-1
Update to 1.4.3-1
newlib Ubuntu:16.04:LTS
- Versions
- 2.1.0+git20141201.db59ff3-2
- 2.2.0+git20150830.5a3d536-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
newlib Ubuntu:18.04:LTS
- Versions
- 2.4.0.20160527-2
- 2.4.0.20160527-3
- 2.4.0.20160527-3ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published