CVE-2019-20367
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Published Jan 8, 2020 · updated Oct 14, 2026 · freedesktop libbsd
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 8, 2020 · NIST NVD
Detected
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Oct 14, 2026 · NIST NVD
Updated
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Affected
- cpe canonical/ubuntu linux12.04
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe canonical/ubuntu linux19.04
- cpe debian/debian linux9.0
- cpe freedesktop/libbsdversion unspecified
- cpe opensuse/leap15.1
Sources
- CVE.orgVulnerability recordCVE-2019-20367
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-20367
30-day exploitation probability 2.9%
first.org - NIST NVDVulnerability recordCVE-2019-20367
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
nvd.nist.gov