http://bugzilla.opensuse.org/show_bug.cgi?id=1134071 Bug ID: 1134071 Summary: VUL-1: CVE-2019-11637: gnu-recutils: NULL pointer dereference in the function rec_rset_get_props Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/231888/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: abergmann@suse.com QA Contact: security-team@suse.de Found By: Security Response Team Blocker: --- CVE-2019-11637: An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_rset_get_props at rec-rset.c in librec.a, leading to a crash. References: https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils... https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils... https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils... -- You are receiving this mail because: You are on the CC list for the bug.