{"id":"CVE-2026-40468","aliases":["ALSA-2026:73429","ALSA-2026:73511","ALSA-2026:73512","AZL-92289","BELL-CVE-2026-40468","CLSA-2026-1784131550","CLSA-2026-1784623908","CLSA-2026-1784802906","DEBIAN-CVE-2026-40468","EUVD-2026-43493","GHSA-c5xj-c73w-hcgm","JLSEC-2026-786","MGASA-2026-0427","OESA-2026-3160","OESA-2026-3161","OESA-2026-3162","OESA-2026-3163","OESA-2026-3164","RHSA-2026:40041","RHSA-2026:49661","RHSA-2026:73429","RHSA-2026:73511","RHSA-2026:73512","RLSA-2026:73429","RLSA-2026:73511","RLSA-2026:73512","SUSE-SU-2026:22767-1","SUSE-SU-2026:22831-1","SUSE-SU-2026:23042-1","SUSE-SU-2026:3211-1","SUSE-SU-2026:3455-1","UBUNTU-CVE-2026-40468","USN-8588-1","openSUSE-SU-2026:21393-1"],"status":"published","title":"Heap buffer overflow in gawk","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","severity":{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00201,"percentile":0.10028,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-07-13T12:07:54Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"gawk","fixed_in":["5.2.2-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gawk","fixed_in":["5.1.1-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gawk","fixed_in":["5.3.2-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gawk","fixed_in":["5.3.2-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"gawk","fixed_in":["5.1.1-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"gawk","fixed_in":["5.3.2-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"gawk","fixed_in":["5.3.2-r3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gawk","fixed_in":["4.0.2-4.el7_3.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk","fixed_in":["5.1.0-6.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-all-langpacks","fixed_in":["5.1.0-6.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-devel","fixed_in":["5.1.0-6.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-doc","fixed_in":["5.1.0-6.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Julia","package":"gawk_jll","fixed_in":["5.4.1+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gawk","fixed_in":["4.1.0-5.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gawk","fixed_in":["1:4.0.1+dfsg-2.1ubuntu2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gawk","fixed_in":["1:4.1.3+dfsg-0.1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gawk","fixed_in":["1:4.1.4+dfsg-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gawk","fixed_in":["1:5.0.1+dfsg-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gawk","fixed_in":["1:5.1.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gawk","fixed_in":["1:5.2.1-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gawk","fixed_in":["1:5.3.2-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1-r1"},{"fixed":"5.1.1-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2-r1"},{"fixed":"5.3.2-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1-r1"},{"fixed":"5.3.2-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1-r1"},{"fixed":"5.1.1-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2-r1"},{"fixed":"5.3.2-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1-r1"},{"fixed":"5.3.2-r3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-4.el7_3.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gawk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gawk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gawk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.2.1-2","1:5.3.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.2.1-2","1:5.3.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.2.1-2","1:5.3.2-1"]},{"source":"osv","ecosystem":"Julia","package":"gawk_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.4.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-2.1.mga10"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-6.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-6.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.0-3.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.0-3.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.0-3.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.0-3.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gawk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gawk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gawk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gawk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gawk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gawk-all-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gawk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gawk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gawk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gawk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-6.el10_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-6.el9_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150000.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150000.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150000.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-150000.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.1+dfsg-2.1ubuntu2+esm2"}]}],"versions":["1:4.0.1+dfsg-2.1ubuntu2","1:4.0.1+dfsg-2.1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.3+dfsg-0.1ubuntu0.1~esm2"}]}],"versions":["1:4.1.1+dfsg-1","1:4.1.3+dfsg-0.1","1:4.1.3+dfsg-0.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.4+dfsg-1ubuntu0.1~esm2"}]}],"versions":["1:4.1.4+dfsg-1","1:4.1.4+dfsg-1build1","1:4.1.4+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0.1+dfsg-1ubuntu0.1+esm1"}]}],"versions":["1:4.2.1+dfsg-1.1build1","1:5.0.1+dfsg-1","1:5.0.1+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.1.0-1ubuntu0.2"}]}],"versions":["1:5.1.0-1build1","1:5.1.0-1build2","1:5.1.0-1build3","1:5.1.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2.1-2ubuntu0.1"}]}],"versions":["1:5.2.1-2","1:5.2.1-2build2","1:5.2.1-2build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.3.2-1ubuntu1.1"}]}],"versions":["1:5.3.2-1build1","1:5.3.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.1+dfsg-2.1ubuntu2+esm2"}]}],"versions":["1:4.0.1+dfsg-2.1ubuntu2","1:4.0.1+dfsg-2.1ubuntu2+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.3+dfsg-0.1ubuntu0.1~esm2"}]}],"versions":["1:4.1.1+dfsg-1","1:4.1.3+dfsg-0.1","1:4.1.3+dfsg-0.1ubuntu0.1~esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.4+dfsg-1ubuntu0.1~esm2"}]}],"versions":["1:4.1.4+dfsg-1","1:4.1.4+dfsg-1build1","1:4.1.4+dfsg-1ubuntu0.1~esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0.1+dfsg-1ubuntu0.1+esm1"}]}],"versions":["1:4.2.1+dfsg-1.1build1","1:5.0.1+dfsg-1","1:5.0.1+dfsg-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.1.0-1ubuntu0.2"}]}],"versions":["1:5.1.0-1build1","1:5.1.0-1build2","1:5.1.0-1build3","1:5.1.0-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2.1-2ubuntu0.1"}]}],"versions":["1:5.2.1-2","1:5.2.1-2build2","1:5.2.1-2build3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.3.2-1ubuntu1.1"}]}],"versions":["1:5.3.2-1build1","1:5.3.2-1ubuntu1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gawk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.2-160000.3.1"}]}],"bundled":3}],"products":[{"vendor":"fossies","product":"gawk"},{"vendor":"gnu","product":"gawk"},{"vendor":"microsoft","product":"gawk"}],"references":[{"url":"https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7","tags":["patch","Patch","fix","web","article"]},{"url":"https://cert.pl/en/posts/2026/07/CVE-2026-40467","tags":["third-party-advisory","Third Party Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40468","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-c5xj-c73w-hcgm"},{"url":"https://access.redhat.com/errata/RHSA-2026:73429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40467","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40468","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40553","tags":["report"]},{"url":"https://bugzilla.redhat.com/2499655","tags":["report"]},{"url":"https://bugzilla.redhat.com/2499657","tags":["report"]},{"url":"https://bugzilla.redhat.com/2499658","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-73429.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73511","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-73511.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73512","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-73512.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-40468","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1784131550.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784623908.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784802906.html","tags":["advisory"]},{"url":"https://cgit.git.savannah.gnu.org/cgit/gawk.git/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40468.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-40468","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0427.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35997","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8588-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40553","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3161","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3162","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3163","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3164","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40041","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40469","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40041.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40467","tags":["advisory"]},{"url":"https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40468","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40469","tags":["advisory"]},{"url":"https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=ae1b2d508f46913269a9e62aceda3636afe8147b","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40553","tags":["advisory"]},{"url":"https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=cca0366144336b49aaa7d5d949966ce8e2c70843","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49661","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49661.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73429.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73511.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73512.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73429","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73511","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73512","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622767-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271351","tags":["report"]},{"url":"https://bugzilla.suse.com/1271352","tags":["report"]},{"url":"https://bugzilla.suse.com/1271354","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40553","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622831-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623042-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263211-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263455-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40553","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-40468","title":"Heap buffer overflow in gawk","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T12:07:54.91Z","modified":"2026-07-13T13:01:29.711Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L","level":"low","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T13:43:11.445168Z"}],"euvd":[{"id":"EUVD-2026-43493","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T12:07:54Z","modified":"2026-07-13T13:01:29Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L","level":"low"}],"updated_at":"2026-11-02T18:20:02.308684Z"}],"ghsa":[{"id":"GHSA-c5xj-c73w-hcgm","title":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may...","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T15:31:48Z","modified":"2026-07-14T03:31:34Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:09:26.474991Z"}],"nvd":[{"id":"CVE-2026-40468","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T13:16:36.907Z","modified":"2026-10-24T22:10:00.21Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:29.114188Z"}],"osv":[{"id":"BELL-CVE-2026-40468","status":"published","published":"2026-07-16T06:04:16.177158Z","modified":"2026-07-21T07:15:05.393861697Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.844435Z"},{"id":"CVE-2026-40468","title":"Heap buffer overflow in gawk","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T12:07:54.91Z","modified":"2026-11-08T02:30:59.920902873Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-08T02:57:55.544929Z"},{"id":"DEBIAN-CVE-2026-40468","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T13:16:36.907Z","modified":"2026-10-25T09:47:34.445532275Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"JLSEC-2026-786","title":"Integer overflow in gawk's `builtin.c` can cause buffer overflow and denial of service","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-25T03:14:11.289Z","modified":"2026-07-25T03:30:03.700958956Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"},{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2026-3160","title":"gawk security update","description":"The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability has been found in \u0026quot;io.c\u0026quot; program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.(CVE-2026-40469)\n\nBuffer overflow vulnerability has been found in \u0026quot;extension/readdir.c\u0026quot; program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:24.651565353Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3161","title":"gawk security update","description":"The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability has been found in \u0026quot;io.c\u0026quot; program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.(CVE-2026-40469)\n\nBuffer overflow vulnerability has been found in \u0026quot;extension/readdir.c\u0026quot; program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:23.831958633Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3162","title":"gawk security update","description":"The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability has been found in \u0026quot;io.c\u0026quot; program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)\n\nBuffer overflow vulnerability has been found in \u0026quot;extension/readdir.c\u0026quot; program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:24.677020264Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3163","title":"gawk security update","description":"The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability has been found in \u0026quot;io.c\u0026quot; program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)\n\nBuffer overflow vulnerability has been found in \u0026quot;extension/readdir.c\u0026quot; program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:24.681346463Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3164","title":"gawk security update","description":"The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code.\r\n\r\nSecurity Fix(es):\n\nUse After Free vulnerability has been found in \u0026quot;io.c\u0026quot; program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)\n\nInteger overflow vulnerability has been found in \u0026quot;builtin.c\u0026quot; program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.(CVE-2026-40469)\n\nBuffer overflow vulnerability has been found in \u0026quot;extension/readdir.c\u0026quot; program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)","status":"published","published":"2026-07-24T11:12:02Z","modified":"2026-08-18T01:21:24.751225095Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:40041","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-18T10:11:39Z","modified":"2026-10-15T10:18:50Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:49661","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-08-05T10:37:07Z","modified":"2026-10-15T10:20:20Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:73429","title":"Red Hat Security Advisory: gawk security update","status":"published","published":"2026-09-30T10:18:00Z","modified":"2026-10-15T10:26:25Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73511","title":"Red Hat Security Advisory: gawk security update","status":"published","published":"2026-10-03T10:16:44Z","modified":"2026-10-15T10:26:26Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73512","title":"Red Hat Security Advisory: gawk security update","status":"published","published":"2026-09-30T10:18:01Z","modified":"2026-10-15T10:26:27Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:73429","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.\n\nSecurity Fix(es):\n\n* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n\n* gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)\n\n* gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-30T12:10:38.243683Z","modified":"2026-09-30T12:45:02.455380397Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73511","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.\n\nSecurity Fix(es):\n\n* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n\n* gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-02T12:00:58.304422Z","modified":"2026-10-02T12:30:03.974091836Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73512","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.\n\nSecurity Fix(es):\n\n* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n\n* gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)\n\n* gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-30T12:05:19.277561Z","modified":"2026-09-30T12:45:02.350739628Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-40468","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T13:16:00Z","modified":"2026-07-23T01:15:34.421366308Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L","level":"low"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"ALSA-2026:73429","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.  \n\nSecurity Fix(es):  \n\n  * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n  * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)\n  * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:30:50.927246633Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73511","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.  \n\nSecurity Fix(es):  \n\n  * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n  * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:02:29.655967108Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73512","title":"Moderate: gawk security update","description":"The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.  \n\nSecurity Fix(es):  \n\n  * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)\n  * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)\n  * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:32:37.579140261Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-92289","title":"CVE-2026-40468 affecting package gawk for versions less than 5.2.2-2","description":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.","status":"published","published":"2026-07-13T13:16:36Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"CLSA-2026-1784131550","title":"gawk: Fix of CVE-2026-40468","description":"- CVE-2026-40468: builtin.c (do_sub): make sofar be size_t to avoid an integer overflow that could corrupt the heap during sub/gsub/gensub on very large buffers.","status":"published","published":"2026-07-17T09:33:51Z","modified":"2026-10-26T09:31:42.20196288Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784623908","title":"gawk: Fix of CVE-2026-40468","description":"- CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed)\n- CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat())\n- CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds)","status":"published","published":"2026-07-21T08:52:12Z","modified":"2026-10-26T09:43:38.554458356Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784802906","title":"gawk: Fix of CVE-2026-40468","description":"- CVE-2026-40468: fix integer overflows in do_sub() in builtin.c and\n  parse_escape() in node.c (sofar widened to size_t, escape accumulator widened\n  to int64_t to avoid overflow on 32-bit builds)","status":"published","published":"2026-07-23T10:35:32Z","modified":"2026-10-26T09:30:27.686261185Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"MGASA-2026-0427","title":"Updated gawk packages fix security vulnerabilities","description":"Use after free in gawk. (CVE-2026-40467)\nHeap buffer overflow in gawk. (CVE-2026-40468)\nHeap buffer overflow in gawk. (CVE-2026-40469)\nStack-based buffer overflow in gawk. (CVE-2026-40553)\n","status":"published","published":"2026-09-20T04:25:32Z","modified":"2026-09-20T04:30:03.399833241Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:21393-1","title":"Security update for gawk","description":"This update for gawk fixes the following issues:\n\n- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash\n  (bsc#1271351).\n- CVE-2026-40468: use-after-free vulnerability in gawk's \"io.c\" file could permit heap metadata manipulation and host\n  memory exhaustion (bsc#1271352).\n- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash\n  (bsc#1271354).\n","status":"published","published":"2026-07-20T13:44:04Z","modified":"2026-07-24T18:24:25.081639444Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22767-1","title":"Security update for gawk","description":"This update for gawk fixes the following issues:\n\n- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash\n  (bsc#1271351).\n- CVE-2026-40468: use-after-free vulnerability in gawk's \"io.c\" file could permit heap metadata manipulation and host\n  memory exhaustion (bsc#1271352).\n- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash\n  (bsc#1271354).\n","status":"published","published":"2026-07-20T13:43:46Z","modified":"2026-07-23T18:24:20.991784848Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22831-1","title":"Security update for gawk","description":"This update for gawk fixes the following issues:\n\n- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash\n  (bsc#1271351).\n- CVE-2026-40468: use-after-free vulnerability in gawk's \"io.c\" file could permit heap metadata manipulation and host\n  memory exhaustion (bsc#1271352).\n- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash\n  (bsc#1271354).\n","status":"published","published":"2026-07-20T13:43:46Z","modified":"2026-07-28T18:24:09.119377389Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:23042-1","title":"Security update for gawk","description":"This update for gawk fixes the following issues\n\n- CVE-2026-40467: use-after-free in the `io.c` program file via the `do_getline_redir()` routine (bsc#1271351).\n- CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352).\n- CVE-2026-40553: buffer overflow in the `extension/readdir.c` program file via the `ftype()` routine (bsc#1271354).\n","status":"published","published":"2026-07-30T10:56:11Z","modified":"2026-08-12T18:23:39.10931399Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3211-1","title":"Security update for gawk","description":"This update for gawk fixes the following issue:\n\n- CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352).\n","status":"published","published":"2026-07-23T14:13:48Z","modified":"2026-07-24T17:16:07.204511353Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3455-1","title":"Security update for gawk","description":"This update for gawk fixes the following issues:\n\n- CVE-2026-40467: use-after-free in the `io.c` program file via the `do_getline_redir()` routine (bsc#1271351).\n- CVE-2026-40468: integer overflow in the `builtin.c` program file (bsc#1271352).\n- CVE-2026-40553: buffer overflow in the `extension/readdir.c` program file via the `ftype()` routine (bsc#1271354).\n","status":"published","published":"2026-08-03T11:47:00Z","modified":"2026-08-04T11:45:06.384376426Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8588-1","title":"gawk vulnerabilities","description":"It was discovered that Gawk incorrectly handled memory when processing\ninput using the getline redirection. An attacker could possibly use\nthis issue to cause a denial of service. (CVE-2026-40467)\n\nIt was discovered that Gawk incorrectly handled certain integer\ncalculations when allocating memory. An attacker could possibly use\nthis issue to cause a denial of service or overwrite heap memory with\nattacker-controlled data. (CVE-2026-40468)\n\nIt was discovered that Gawk incorrectly handled certain integer\ncalculations when performing substitutions. An attacker could possibly\nuse this issue to cause a denial of service. (CVE-2026-40469)\n\nIt was discovered that Gawk incorrectly handled memory when reading\ndirectory entries. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. This issue only affected\nUbuntu 26.04 LTS. (CVE-2026-40553)","status":"published","published":"2026-07-22T16:29:49Z","modified":"2026-07-23T01:29:27.5557699Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}