IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-13 13:16

MODIFIED

2026-07-13 13:16

CVSS_SCORE V3

5.1

EPSS (Prob. Exploit)

0.29%

Top 78.4%

DATA SOURCES:

NVD 🔗 2026-07-13 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> CVSS V3 METRICS

CVSS_VECTOR

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

> MÉTRIQUES CVSS DÉTAILLÉES

                CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
            

Métrique	Valeur	Interprétation
AV (Vecteur d'Attaque) Attack Vector	Local (L)	Exploit nécessite un accès local au système
AC (Complexité d'Attaque) Attack Complexity	Low (L)	Peu de conditions requises pour exploiter
PR (Privilèges Requis) Privileges Required	None (N)	Aucune authentification requise
UI (Interaction Utilisateur) User Interaction	None (N)	Aucune interaction utilisateur nécessaire
S (Périmètre) Scope	Unchanged (U)	Impact reste dans le périmètre du composant compromis
C (Impact Confidentialité) Confidentiality Impact	None (N)	Aucune divulgation d'informations
I (Impact Intégrité) Integrity Impact	Low (L)	Modification limitée des données possible
A (Impact Disponibilité) Availability Impact	Low (L)	Interruption partielle du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité

None

Aucune divulgation d'informations

Intégrité

Low

Modification limitée des données possible

Disponibilité

Low

Interruption partielle du service possible

> WEAKNESSES

CWE-121

> CWE DETAILED DESCRIPTIONS

CWE-121: Stack-based Buffer Overflow - The product writes past the end of a buffer that was allocated on the stack.

> RED HAT SECURITY ADVISORIES

RHSA-2026:49661 MODERATE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available.

RHSA-2026:73512 MODERATE

Red Hat Security Advisory: gawk security update

An update for gawk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS...

RHSA-2026:73429 MODERATE

Red Hat Security Advisory: gawk security update

An update for gawk is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVS...

RHSA-2026:79357 IMPORTANT

Red Hat Security Advisory: Red Hat Cost Management On-Premise container image update

Updated container image for Red Hat Cost Management On-Premise is now available.

RHSA-2026:82939 IMPORTANT

Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Stack-based buffer overflow in gawk

AFFECTED PACKAGES:

Unknown / Unknown

> HISTORIQUE DES MODIFICATIONS

Première apparition

13/07/2026 13:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-121: Stack-based Buffer Overflow - A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a para...

Nouvelle valeur: