CVE:CVE-2019-19918
CNNVD:CNNVD-201912-971
Lout是一款批处理文档格式化程序。
Lout 3.40版本中的z02.c文件的‘srcnext()’函数存在缓冲区错误漏洞。远程攻击者可借助特制文件利用该漏洞导致应用程序崩溃。
solution:Upgrade lout_project lout to a higher version than 3.40,and avoid the version 3.40; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,15.0:sp2,and avoid the version 15.0:sp1,15.0:sp2; Upgrade fedoraproject fedora to a higher version than 31,32,33,and avoid the version 31,32,33; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2