GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug report was intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when     a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the     observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug report was     intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is     generated by Bison. (CVE-2020-24240)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
196647	RHEL 5 : bison (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
196640	RHEL 6 : bison (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
166844	EulerOS 2.0 SP10 : bison (EulerOS-SA-2022-2674)	Nessus	Huawei Local Security Checks	medium
166837	EulerOS 2.0 SP10 : bison (EulerOS-SA-2022-2642)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2020-24240

medium

Tenable Plugins

medium

medium

medium

medium