Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The version of hunspell installed on the remote host is prior to 1.7.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-235-01 advisory.

  - Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
    (CVE-2019-16707)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the hunspell packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Hunspell 1.7.0 has an invalid read operation in     SuggestMgr::leftcommonsubstring in     suggestmgr.cxx(CVE-2019-16707)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the hunspell packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Hunspell 1.7.0 has an invalid read operation in     SuggestMgr::leftcommonsubstring in     suggestmgr.cxx.(CVE-2019-16707)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the hunspell package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Hunspell 1.7.0 has an invalid read operation in     SuggestMgr::leftcommonsubstring in     suggestmgr.cxx.(CVE-2019-16707)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the hunspell package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Hunspell 1.7.0 has an invalid read operation in     SuggestMgr::leftcommonsubstring in     suggestmgr.cxx.(CVE-2019-16707)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the hunspell packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Hunspell 1.7.0 has an invalid read operation in     SuggestMgr::leftcommonsubstring in     suggestmgr.cxx.(CVE-2019-16707)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for hunspell fixes the following issues :

CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3971 advisory.

  - Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
    (CVE-2019-16707)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3971 advisory.

    Hunspell is a spell checker and morphological analyzer library and program designed for languages with     rich morphology and complex word compounding or character encoding.

    Security Fix(es):

    * hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx (CVE-2019-16707)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1518 advisory.

  - Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
    (CVE-2019-16707)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for hunspell fixes the following issues :

  - CVE-2019-16707: Fixed an invalid read in     SuggestMgr:leftcommonsubstring (bsc#1151867).

This update was imported from the SUSE:SLE-15:Update update project.

Security Fix(es) :

  - hunspell: out-of-bounds read in     SuggestMgr::leftcommonsubstring in suggestmgr.cxx     (CVE-2019-16707)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3971 advisory.

    [1.3.2-16]
    - Resolves: rhbz#1775556 CVE-2019-16707

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2019-16707 hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2019-16707.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
196116	RHEL 6 : hunspell (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
164364	Slackware Linux 15.0 / current hunspell Vulnerability (SSA:2022-235-01)	Nessus	Slackware Local Security Checks	medium
153279	EulerOS 2.0 SP2 : hunspell (EulerOS-SA-2021-2382)	Nessus	Huawei Local Security Checks	medium
149141	EulerOS 2.0 SP3 : hunspell (EulerOS-SA-2021-1798)	Nessus	Huawei Local Security Checks	medium
148084	EulerOS 2.0 SP5 : hunspell (EulerOS-SA-2021-1680)	Nessus	Huawei Local Security Checks	medium
147521	EulerOS Virtualization 3.0.2.6 : hunspell (EulerOS-SA-2021-1436)	Nessus	Huawei Local Security Checks	medium
147487	EulerOS Virtualization for ARM 64 3.0.2.0 : hunspell (EulerOS-SA-2021-1400)	Nessus	Huawei Local Security Checks	medium
147475	EulerOS Virtualization 3.0.6.6 : hunspell (EulerOS-SA-2021-1482)	Nessus	Huawei Local Security Checks	medium
147032	EulerOS Virtualization for ARM 64 3.0.6.0 : hunspell (EulerOS-SA-2021-1535)	Nessus	Huawei Local Security Checks	medium
145753	EulerOS 2.0 SP8 : hunspell (EulerOS-SA-2021-1146)	Nessus	Huawei Local Security Checks	medium
144690	EulerOS 2.0 SP9 : hunspell (EulerOS-SA-2021-1026)	Nessus	Huawei Local Security Checks	medium
144664	EulerOS 2.0 SP9 : hunspell (EulerOS-SA-2021-1007)	Nessus	Huawei Local Security Checks	medium
143757	SUSE SLES12 Security Update : hunspell (SUSE-SU-2020:2967-1)	Nessus	SuSE Local Security Checks	medium
143681	SUSE SLED15 / SLES15 Security Update : hunspell (SUSE-SU-2020:2966-1)	Nessus	SuSE Local Security Checks	medium
143284	CentOS 7 : hunspell (RHSA-2020:3971)	Nessus	CentOS Local Security Checks	medium
143079	RHEL 7 : hunspell (RHSA-2020:3971)	Nessus	Red Hat Local Security Checks	medium
141962	Amazon Linux 2 : hunspell (ALAS-2020-1518)	Nessus	Amazon Linux Local Security Checks	medium
141893	openSUSE Security Update : hunspell (openSUSE-2020-1717)	Nessus	SuSE Local Security Checks	medium
141884	openSUSE Security Update : hunspell (openSUSE-2020-1719)	Nessus	SuSE Local Security Checks	medium
141683	Scientific Linux Security Update : hunspell on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	medium
141209	Oracle Linux 7 : hunspell (ELSA-2020-3971)	Nessus	Oracle Linux Local Security Checks	medium
131448	Fedora 30 : hunspell (2019-656f7ac8ca)	Nessus	Fedora Local Security Checks	medium
131201	Fedora 30 : mingw-hunspell (2019-746b0b02f7)	Nessus	Fedora Local Security Checks	medium
131196	Fedora 31 : mingw-hunspell (2019-074bf7d2d3)	Nessus	Fedora Local Security Checks	medium
131095	Fedora 31 : hunspell (2019-7841e28c1b)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2019-16707

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium