Recommended action window: Monitor and triage in normal cycle
NVD description
GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-16395. CVE-2019-16396. CVE-2023-4501. Buffer overflows, use-after-free, authentication bypass. The difference is attack surface. PHP powers an enormous amount of public-facing infrastructure. COBOL generally doesn't. Less exposure doesn't mean fewer bugs, let alone immunity. Thanks for playing 🖖🏻
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gnucobol_project | gnucobol | 2.2 | - | - |