Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2019-6458: recutils can cause excessive memory use
CVE-2019-6458 · published 7 years ago
Summary
The recutils program on Debian can keep using more memory over time when it processes certain data. This can slow down your server or cause it to run out of memory. Install the latest update from Debian or apply the provided patch to stop the memory growth.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | recutils | All versions |
| Debian:14 | debian | recutils | All versions |
| – | gnu | recutils |
1.8 cpe:2.3:a:gnu:recutils:1.8:*:*:*:*:*:*:* |
Original advisory text
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a.
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a.
References
- https://security-tracker.debian.org/tracker/CVE-2019-6458 Vendor Advisory
- https://github.com/TeamSeri0us/pocs/tree/master/recutils Exploit Third Party Advisory
Severity
6.5
Medium
Type
CWE-401Memory Leak
Timeline
Published16 Jan 2019
Updated4 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta