Findings

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Published Jan 8, 2020 · updated Oct 14, 2026 · freedesktop libbsd

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Timeline

Detection, updates, and resolution for this record.

  1. Jan 8, 2020 · NIST NVD

    Detected

    nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

  2. Oct 14, 2026 · NIST NVD

    Updated

    nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe canonical/ubuntu linux19.04
  • cpe debian/debian linux9.0
  • cpe freedesktop/libbsdversion unspecified
  • cpe opensuse/leap15.1

Sources

  • CVE.orgCVE-2019-20367

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2019-20367

    nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

    nvd.nist.gov

References