CVE-2019-19847
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in...
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
CVE-2019-19847- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
CVE-2019-19847- Updated
- 2026-11-02
EUVDEUVD-2019-9443 No score
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
EUVD-2019-9443- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j77-qrh4-5xjr No score
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in...
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
GHSA-2j77-qrh4-5xjr- Updated
- 2026-11-02
OSVAZL-7273
CVE-2019-19847 affecting package libspiro for versions less than 20221101-1
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
AZL-7273- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
CVE-2019-19847- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-19847
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
DEBIAN-CVE-2019-19847- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-19847
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
- Record
UBUNTU-CVE-2019-19847- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10996-1 No score
libspiro-devel-20200505-1.6 on GA media
These are all security issues fixed in the libspiro-devel-20200505-1.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10996-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libspiroAzure Linux:2 |
before 20221101-1 | 20221101-1 |
libspiroDebian:12 |
before 1:20200505-1 | 1:20200505-1 |
libspiroDebian:13 |
before 1:20200505-1 | 1:20200505-1 |
libspiroDebian:14 |
before 1:20200505-1 | 1:20200505-1 |
libspiroUbuntu:16.04:LTS |
All versions, plus listed versions 1:0.5.20150702-21:0.5.20150702-31:0.5.20150702-4 |
None known |
libspiroUbuntu:18.04:LTS |
All versions, plus listed versions 1:0.5.20150702-51:0.5.20150702-7 |
None known |
libspiroUbuntu:20.04:LTS |
All versions, plus listed versions 1:0.5.20150702-81:20190731-2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-19847 is a high vulnerability (CVSS 8.1) in Libspiro Project Libspiro, published December 17, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 72nd percentile. Fixed in libspiro 20221101-1.