PatchTheCVEbibutils vulnerabilities and fixes
Recent CVEs affecting bibutils, with upgrade or downgrade steps. 3 tracked.
bibutils has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-05-07. Highest priority: CVE-2018-10775 (score 47/100).
- CVE-2018-10775 MEDIUM 6.5 UPGRADE NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allow
- CVE-2018-10774 MEDIUM 6.5 UPGRADE Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows
- CVE-2018-10773 MEDIUM 6.5 UPGRADE NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remo
FAQ
How do I fix bibutils vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bibutils being exploited right now?
None of the tracked bibutils CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bibutils CVE should I patch first?
CVE-2018-10775 currently ranks highest (47/100): NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allow.