PatchTheCVEbibutils project vulnerabilities
Recent CVEs affecting bibutils project products. 3 tracked.
bibutils project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-05-07. Highest priority: CVE-2018-10775 (score 47/100).
- CVE-2018-10775 MEDIUM 6.5 UPGRADE NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allow
- CVE-2018-10774 MEDIUM 6.5 UPGRADE Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows
- CVE-2018-10773 MEDIUM 6.5 UPGRADE NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remo
FAQ
How do I fix bibutils project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bibutils project being exploited right now?
None of the tracked bibutils project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bibutils project CVE should I patch first?
CVE-2018-10775 currently ranks highest (47/100): NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allow.