PatchTheCVEyabasic vulnerabilities and fixes
Recent CVEs affecting yabasic, with upgrade or downgrade steps. 2 tracked.
yabasic has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-12-13. Highest priority: CVE-2019-19720 (score 54/100).
- CVE-2019-19796 HIGH 7.8 DOWNGRADE Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.
- CVE-2019-19720 HIGH 8.8 DOWNGRADE Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source f
FAQ
How do I fix yabasic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yabasic being exploited right now?
None of the tracked yabasic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yabasic CVE should I patch first?
CVE-2019-19720 currently ranks highest (54/100): Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source f.