CVE-2019-16707
CVE-2019-16707
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
CVSS 6.5 · Medium · EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
hunspell Debian:12
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
hunspell Debian:13
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
hunspell Debian:14
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
hunspell Ubuntu:14.04:LTS
- Versions
- 1.3.2-4ubuntu1
- 1.3.2-6ubuntu1
- 1.3.2-6ubuntu2
- 1.3.2-6ubuntu2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
enchant Ubuntu:16.04:LTS
- Versions
- 1.6.0-10.1build1
- 1.6.0-10.1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hunspell Ubuntu:16.04:LTS
- Versions
- 1.3.3-3ubuntu3
- 1.3.3-3ubuntu4
- 1.3.3-4ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
calibre Ubuntu:16.04:LTS
- Versions
- 2.33.0+dfsg-1build1
- 2.38.0+dfsg-1
- 2.45.0+dfsg-1
- 2.45.0+dfsg-1build1
- 2.48.0+dfsg-1
- 2.48.0+dfsg-1build1
- 2.54.0+dfsg-1
- 2.55.0+dfsg-1
- 2.55.0+dfsg-1ubuntu0.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
focuswriter Ubuntu:16.04:LTS
- Versions
- 1.5.4.1-1build1
- 1.5.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
postbooks Ubuntu:16.04:LTS
- Versions
- 4.9.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:16.04:LTS
- Versions
- 4.4.1-1
- 4.4.1-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
enchant Ubuntu:18.04:LTS
- Versions
- 1.6.0-11build2
- 1.6.0-11.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hunspell Ubuntu:18.04:LTS
- Versions
- 1.6.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
calibre Ubuntu:18.04:LTS
- Versions
- 3.7.0+dfsg-2
- 3.7.0+dfsg-2build1
- 3.12.0+dfsg-1
- 3.13.0+dfsg-1
- 3.14.0+dfsg-1
- 3.15.0.1+dfsg-1
- 3.16.0+dfsg-1
- 3.16.0+dfsg-1build1
- 3.17.0+dfsg-1
- 3.17.0+dfsg-2
- 3.18.0+dfsg-1build1
- 3.19.0+dfsg-1
- 3.20.0+dfsg-1
- 3.21.0+dfsg-1
- 3.21.0+dfsg-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
focuswriter Ubuntu:18.04:LTS
- Versions
- 1.6.6-1
- 1.6.7-1
- 1.6.8-1
- 1.6.8-2
- 1.6.9-1
- 1.6.10-1
- 1.6.11-1
- 1.6.12-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
postbooks Ubuntu:18.04:LTS
- Versions
- 4.10.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS
- Versions
- 5.9.1+dfsg-4
- 5.9.1+dfsg-4ubuntu1
- 5.9.2+dfsg-2ubuntu1
- 5.9.3+dfsg-0ubuntu1
- 5.9.4+dfsg-0ubuntu1
- 5.9.5+dfsg-0ubuntu2
- 5.9.5+dfsg-0ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:18.04:LTS
- Versions
- 4.5-1
- 5.0.2-1
- 5.0.2-1build1
- 5.0.2-1build2
- 5.0.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hunspell Ubuntu:20.04:LTS
- Versions
- 1.7.0-2build1
- 1.7.0-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
calibre Ubuntu:20.04:LTS
- Versions
- 3.46.0+dfsg-1
- 4.2.0+dfsg-2
- 4.3.0+dfsg-1
- 4.3.0+dfsg-2
- 4.4.0+dfsg-1
- 4.5.0+dfsg-1
- 4.5.0+dfsg-2
- 4.5.0+dfsg-3
- 4.6.0+dfsg-1
- 4.7.0+dfsg-1
- 4.99.3+dfsg-2
- 4.99.4+dfsg-1
- 4.99.4+dfsg-1build1
- 4.99.4+dfsg+really4.10.0+py3-2
- 4.99.4+dfsg+really4.11.2-1
- 4.99.4+dfsg+really4.11.2-1build1
- 4.99.4+dfsg+really4.12.0-1
- 4.99.4+dfsg+really4.12.0-1build1
- 4.99.4+dfsg+really4.12.0-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
enchant Ubuntu:20.04:LTS
- Versions
- 1.6.0-11.1build1
- 1.6.0-11.3
- 1.6.0-11.3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
focuswriter Ubuntu:20.04:LTS
- Versions
- 1.7.3-1
- 1.7.4-1
- 1.7.4-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS
- Versions
- 5.12.4+dfsg-1ubuntu1
- 5.12.4+dfsg-1ubuntu3
- 5.12.5+dfsg-3ubuntu1
- 5.12.5+dfsg-6ubuntu2
- 5.12.5+dfsg-7
- 5.12.5+dfsg-7build1
- 5.12.8+dfsg-0ubuntu1
- 5.12.8+dfsg-0ubuntu1.1
- 5.12.8+dfsg-0ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texmaker Ubuntu:Pro:20.04:LTS
- Versions
- 5.0.3-1build2
- 5.0.3-1build3
- 5.0.3-1build4
- 5.0.3-1build5
- 5.0.3-1ubuntu0.20.04.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/butterflyhack/hunspell-crash
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD4AJ4M74VT3I6L37E4P5DNYZYBZIOVM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNTSVWI4SWBQL6XMXNGEH7EAQ45WN63G/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2YOYFI36IWKABNGFTWXCH7TTGAFODH6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24NTBHK2QNYKSBMJI34WEU5MHS3H2FAI/
- https://nvd.nist.gov/vuln/detail/CVE-2019-16707