kritisch
CVE-2026-40469
gawk: gawk: Denial of Service due to integer overflow
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Red Hat2.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Julia5.1CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut Red Hat (mittel), Julia (mittel), Ubuntu (mittel).
Beschreibung
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 5.0 | gawk, gawk-all-langpacks, gawk-bin und 3 weitere | 5.3.2-5.ph5 |
| debian 11 | gawk | kein Fix angegeben |
| debian 12 | gawk | kein Fix angegeben |
| debian 13 | gawk | kein Fix angegeben |
| debian 14 | gawk | kein Fix angegeben |
| echo | gawk | 1:5.2.1-2+e1 |
| julia::Julia Ecosystem Security Advisories | gawk_jll | 5.4.1+0 |
| rapidfort alpine 3.20 | gawk | kein Fix angegeben |
| rapidfort alpine 3.21 | gawk | kein Fix angegeben |
| rapidfort alpine 3.22 | gawk | kein Fix angegeben |
| rapidfort alpine 3.23 | gawk | kein Fix angegeben |
| rapidfort alpine 3.24 | gawk | kein Fix angegeben |
Alle 48 Einträge aus 29 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 5.0 | gawk | 5.3.2-5.ph5 |
| Photon OS 5.0 | gawk-all-langpacks | 5.3.2-5.ph5 |
| Photon OS 5.0 | gawk-bin | 5.3.2-5.ph5 |
| Photon OS 5.0 | gawk-devel | 5.3.2-5.ph5 |
| Photon OS 5.0 | gawk-doc | 5.3.2-5.ph5 |
| Photon OS 5.0 | gawk-extras | 5.3.2-5.ph5 |
| debian 11 | gawk | kein Fix angegeben |
| debian 12 | gawk | kein Fix angegeben |
| debian 13 | gawk | kein Fix angegeben |
| debian 14 | gawk | kein Fix angegeben |
| echo | gawk | 1:5.2.1-2+e1 |
| julia::Julia Ecosystem Security Advisories | gawk_jll | 5.4.1+0 |
| rapidfort alpine 3.20 | gawk | kein Fix angegeben |
| rapidfort alpine 3.21 | gawk | kein Fix angegeben |
| rapidfort alpine 3.22 | gawk | kein Fix angegeben |
| rapidfort alpine 3.23 | gawk | kein Fix angegeben |
| rapidfort alpine 3.24 | gawk | kein Fix angegeben |
| rapidfort debian 12 | gawk | kein Fix angegeben |
| rapidfort debian 13 | gawk | kein Fix angegeben |
| rapidfort fedora 41 | gawk | 0:5.3.0-5.fc41 |
| rapidfort fedora 41 | rf-gawk | 0:5.3.0-5.fc41 |
| rapidfort fedora 43 | gawk | 0:5.3.2-3.fc43 |
| rapidfort fedora 43 | gawk-all-langpacks | 5.3.2-3.fc43 |
| rapidfort fedora 43 | gawk-devel | 5.3.2-3.fc43 |
| rapidfort fedora 43 | gawk-doc | 5.3.2-3.fc43 |
| rapidfort fedora 43 | rf-gawk | 0:5.3.2-3.fc43 |
| rapidfort fedora 43 | rf-gawk-all-langpacks | 5.3.2-3.fc43 |
| rapidfort fedora 43 | rf-gawk-devel | 5.3.2-3.fc43 |
| rapidfort fedora 43 | rf-gawk-doc | 5.3.2-3.fc43 |
| rapidfort Oracle Linux | rf-gawk | 5.4.1-10.rf |
| rapidfort Oracle Linux | rf-gawk-all-langpacks | 5.4.1-10.rf |
| rapidfort Oracle Linux | rf-gawk-devel | 5.4.1-10.rf |
| rapidfort Oracle Linux | rf-gawk-doc | 5.4.1-10.rf |
| rapidfort rocky | rf-gawk | 0:5.4.1-10.rf |
| rapidfort rocky | rf-gawk-all-langpacks | 0:5.4.1-10.rf |
| rapidfort ubuntu 20.04 | gawk | 1:5.1.0-1ubuntu0.2, 1:5.2.1-2ubuntu0.1, 1:5.3.2-1ubuntu1.1 |
| rapidfort ubuntu 22.04 | gawk | 1:5.1.0-1ubuntu0.2, 1:5.2.1-2ubuntu0.1, 1:5.3.2-1ubuntu1.1 |
| rapidfort ubuntu 24.04 | gawk | 1:5.1.0-1ubuntu0.2, 1:5.2.1-2ubuntu0.1, 1:5.3.2-1ubuntu1.1 |
| Red Hat | gawk | kein Fix angegeben |
| seal Red Hat 7 | gawk | 4.0.2-4.el7_3.1+sp999 |
| seal Red Hat 7 | seal-gawk | 4.0.2-4.el7_3.1+sp999 |
| seal Red Hat 9 | gawk | 5.1.0-6.el9+sp999 |
| seal Red Hat 9 | seal-gawk | 5.1.0-6.el9+sp999 |
| ubuntu 18.04-ESM | gawk | 1:4.1.4+dfsg-1ubuntu0.1~esm2 |
| ubuntu 20.04-ESM | gawk | 1:5.0.1+dfsg-1ubuntu0.1+esm1 |
| ubuntu 22.04 | gawk | 1:5.1.0-1ubuntu0.2 |
| ubuntu 24.04 | gawk | 1:5.2.1-2ubuntu0.1 |
| ubuntu 26.04 | gawk | 1:5.3.2-1ubuntu1.1 |
Referenzen
- https://access.redhat.com/security/cve/CVE-2026-40469
- https://cert.pl/en/posts/2026/07/CVE-2026-40467
- https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=ae1b2d508f46913269a9e62aceda3636afe8147b
- https://nvd.nist.gov/vuln/detail/CVE-2026-40469
- https://ubuntu.com/security/notices/USN-8588-1
- https://www.cve.org/CVERecord?id=CVE-2026-40469