Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-40468 →

DEBIAN-CVE-2026-40468

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating s...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org