Known vulnerabilities in GNU Bison
Vendor:
GNU
Software:
GNU Bison
Software CPE:
cpe:2.3:a:gnu:gnu_bison:*:*:*:*:*:*:*:*
Website:
https://www.gnu.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
3.8.2
3.8.1
3.8
3.7.6
3.7.5
3.7.4
3.7.3
3.7.2
3.7.1
3.7
3.6.4
3.6.3
3.6.2
3.6.1
3.6
3.5.4
3.5.3
3.5.2
3.5.1
3.5
3.4.2
3.4.1
3.4
3.3.2
3.3.1
3.3
3.2.4
3.2.3
3.2.2
3.2.1
3.2
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.7.1
2.7
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6
2.5.1
2.5
2.4.3
2.4.2
2.4.1
2.4
2.3
2.2
2.1
2.0
1.875
1.75
1.50
1.35
1.34
1.33
1.32
1.31
1.30
1.29
1.28
1.27
1.25
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46312 - Heap-based Buffer Overflow CVE-2020-24979 |
CWE-122 | Medium | 3.7.2 | 07.09.2020 |
SB2020090710 SB2020090711 |
||
| #VU46311 - Improper input validation CVE-2020-24980 |
CWE-20 | Medium | 3.7.2 | 07.09.2020 |
SB2020090710 SB2020090712 |
||
| #VU46196 - Improper input validation CVE-2020-14150 |
CWE-20 | Low | 3.5.4 | 01.09.2020 |
SB2020061533 |
||
| #VU46310 - Use After Free CVE-2020-24240 |
CWE-416 | Medium | 3.7.1 | 25.08.2020 |
SB2020090708 SB2020090709 SB2022072229 |