Описание
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
A flaw was found in gawk. A Use After Free vulnerability exists in the do_getline_redir() routine within the io.c program file. This vulnerability can be triggered by an attacker, potentially leading to a system crash and causing a Denial of Service (DoS).
Отчет
Moderate: A Use After Free vulnerability in gawk's do_getline_redir() routine can lead to a denial of service. This flaw, affecting gawk in Red Hat Hardened Images, requires a local attacker with low privileges to trick a user into interacting with specially crafted input, limiting its immediate impact.
Меры по смягчению последствий
To mitigate this issue, users should avoid processing untrusted or maliciously crafted input with gawk. Exercise caution when executing gawk scripts or commands that process data from unknown or unverified sources.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | gawk | Affected | ||
| Red Hat Enterprise Linux 6 | gawk | Out of support scope | ||
| Red Hat Enterprise Linux 7 | gawk | Affected | ||
| Red Hat Enterprise Linux 8 | gawk | Affected | ||
| Red Hat Enterprise Linux 9 | gawk | Affected | ||
| Red Hat OpenShift Container Platform 4 | rhcos | Affected | ||
| Red Hat Hardened Images | gawk-main-5.4.0-3.1.hum1 | Fixed | RHSA-2026:40041 | 15.07.2026 |
| Red Hat Hardened Images | gawk-main-5.4.1-1.hum1 | Fixed | RHSA-2026:49661 | 03.08.2026 |
Показывать по
Дополнительная информация
Статус:
4 Medium
CVSS3
Связанные уязвимости
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
Use After Free vulnerability has been found in "io.c" program file of ...
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
4 Medium
CVSS3