CVE-2019-11639 (NVD)

2019-05-01

An issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the function rec_type_check_enum at rec-types.c in librec.a.

Products Recutils
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch - None (likely due to unavailable code)
Links https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils
https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/recfix