Every CVE Search/ Get API key

CVE-2020-24980

An assertion failure was found in src/parse-gram.c in GNU bison 3.7.1.1-cb7dc-dirty. A local...

No scoreFix availableRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

What each source reports

CVE List No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Record
CVE-2020-24980
Updated
2026-11-02
EUVDEUVD-2020-17680 No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Record
EUVD-2020-17680
Updated
2026-11-03
GitHub AdvisoriesGHSA-92x6-p3gj-xr97 No score

An assertion failure was found in src/parse-gram.c in GNU bison 3.7.1.1-cb7dc-dirty. A local...

An assertion failure was found in src/parse-gram.c in GNU bison 3.7.1.1-cb7dc-dirty. A local attacker may execute bison with crafted input file containing character '' at the end and while still in a character or a string.

Record
GHSA-92x6-p3gj-xr97
Updated
2026-11-02
NVD No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Record
CVE-2020-24980
Updated
2026-11-02
OSVALPINE-CVE-2020-24980 No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Record
ALPINE-CVE-2020-24980
Updated
2026-11-02
OSV No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Record
CVE-2020-24980
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
bison
Alpine:v3.13
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.14
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.15
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.16
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.17
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.18
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.19
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.20
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.21
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.22
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.23
before 3.7.2-r0
3.7.2-r0
bison
Alpine:v3.24
before 3.7.2-r0
3.7.2-r0

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-24980 has been rejected by its source and should not be treated as a live vulnerability, published September 3, 2020. Fixed in bison 3.7.2-r0.

References

MoveEnter Open