Aggregates CVE and security vulnerability intelligence across all gnucobol_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk memory corruption and vendor risk buffer overflow and related problems; some flaws may lead to vendor impact memory corruption and vendor impact application crash.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-16396 | GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code. | [email protected] | 7.8 | 0.14% | 2019-09-17 | 2024-11-21 |
| CVE-2019-16395 | GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code. | [email protected] | 7.8 | 0.21% | 2019-09-17 | 2024-11-21 |
| CVE-2019-14541 | GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/typeck.c via crafted COBOL source code. | [email protected] | 7.8 | 0.30% | 2019-08-02 | 2024-11-21 |
| CVE-2019-14528 | GnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL source code. | [email protected] | 7.8 | 0.18% | 2019-08-02 | 2024-11-21 |
| CVE-2019-14486 | GnuCOBOL 2.2 has a buffer overflow in cb_evaluate_expr in cobc/field.c via crafted COBOL source code. | [email protected] | 7.8 | 0.18% | 2019-08-01 | 2024-11-21 |
| CVE-2019-14468 | GnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code. | [email protected] | 7.8 | 0.21% | 2019-08-01 | 2024-11-21 |