CVE-2020-24979
A Buffer Overflow vulnerability was found in src/symtab.c in GNU bison 3.7.1.1-cb7dc-dirty. A...
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2020-24979- Updated
- 2026-11-02
EUVDEUVD-2020-17679 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2020-17679- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwh8-q557-397v No score
A Buffer Overflow vulnerability was found in src/symtab.c in GNU bison 3.7.1.1-cb7dc-dirty. A...
A Buffer Overflow vulnerability was found in src/symtab.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file redefining the EOF token, which could triggers Heap buffer overflow and thus cause system crash.
- Record
GHSA-wwh8-q557-397v- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2020-24979- Updated
- 2026-11-02
OSVALPINE-CVE-2020-24979 No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
ALPINE-CVE-2020-24979- Updated
- 2026-11-02
OSV No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2020-24979- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10653-1 No score
bison-3.7.6-3.13 on GA media
These are all security issues fixed in the bison-3.7.6-3.13 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10653-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bisonAlpine:v3.13 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.14 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.15 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.16 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.17 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.18 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.19 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.20 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.21 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.22 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.23 |
before 3.7.2-r0 | 3.7.2-r0 |
bisonAlpine:v3.24 |
before 3.7.2-r0 | 3.7.2-r0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-24979 has been rejected by its source and should not be treated as a live vulnerability, published September 3, 2020. Fixed in bison 3.7.2-r0.