CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...

9.1 CriticalFix available

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

2.87%Up 1.2 points since Apr 14, 2021

What each source reports

NVD Score used 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: CVE-2019-20367
Updated: 2026-11-02

EUVDEUVD-2019-10919 No score

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: EUVD-2019-10919
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mc9f-fv52-p544 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: GHSA-mc9f-fv52-p544
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVALPINE-CVE-2019-20367 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: ALPINE-CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2019-20367 9.1

CVE-2019-20367 does not affect BellSoft software

Record: BELL-CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSV 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-20367 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: DEBIAN-CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-20367 9.1

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Record: UBUNTU-CVE-2019-20367
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2020-0061 No score

Updated libbsd packages fix security vulnerability

It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table (strtab) in nlist.c. An attacker could possibly use this issue to access sensitive information (CVE-2019-20367).

Record: MGASA-2020-0061
Updated: 2026-11-02

OSVopenSUSE-SU-2020:0679-1 No score

Security update for libbsd

This update for libbsd fixes the following issues:

CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551).

This update was imported from the SUSE:SLE-15:Update update project.

Record: openSUSE-SU-2020:0679-1
Updated: 2026-11-02

OSVSUSE-SU-2020:1298-1 No score

Security update for libbsd

This update for libbsd fixes the following issues:

CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551).

Record: SUSE-SU-2020:1298-1
Updated: 2026-11-02

OSVUSN-4243-1 No score

libbsd vulnerabilities

It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2016-2090)

It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this issue to access sensitive information. (CVE-2019-20367)

Record: USN-4243-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libbsd` Alpine:v3.10	before 0.9.1-r1	0.9.1-r1
`libbsd` Alpine:v3.11	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.12	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.13	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.14	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.15	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.16	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.17	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.18	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.19	before 0.10.0-r0	0.10.0-r0

Show 15 moreShow less

Affected packages
Package	Affected	Fixed
`libbsd` Alpine:v3.20	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.21	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.22	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.23	before 0.10.0-r0	0.10.0-r0
`libbsd` Alpine:v3.24	before 0.10.0-r0	0.10.0-r0
`libbsd` Debian:12	before 0.10.0-1	0.10.0-1
`libbsd` Debian:13	before 0.10.0-1	0.10.0-1
`libbsd` Debian:14	before 0.10.0-1	0.10.0-1
`libbsd` Debian:9	before 0.8.3-1+deb9u1, plus listed versions 0.8.3-1	0.8.3-1+deb9u1
`libbsd` Mageia:7	before 0.9.1-3.1.mga7	0.9.1-3.1.mga7
`libbsd` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 0.8.7-3.3.17	0.8.7-3.3.17
`libbsd` Ubuntu:Pro:14.04:LTS	before 0.6.0-2ubuntu1+esm1, plus listed versions 0.6.0-10.6.0-1ubuntu10.6.0-2ubuntu1	0.6.0-2ubuntu1+esm1
`libbsd` Ubuntu:16.04:LTS	before 0.8.2-1ubuntu0.1, plus listed versions 0.7.0-20.8.0-20.8.1-10.8.2-1	0.8.2-1ubuntu0.1
`libbsd` Ubuntu:18.04:LTS	before 0.8.7-1ubuntu0.1, plus listed versions 0.8.6-10.8.6-20.8.6-30.8.7-1	0.8.7-1ubuntu0.1
`libbsd` openSUSE:Leap 15.1	before 0.8.7-lp151.3.3.1	0.8.7-lp151.3.3.1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-20367 is a critical vulnerability (CVSS 9.1) in Freedesktop Libbsd, published January 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. Fixed in libbsd 0.9.1-r1.

References

Show 19 moreShow less