Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31107
HistoryJul 01, 2021 - 7:18 a.m.

Denial Of Service (DoS)

2021-07-0107:18:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
aspell
vulnerability
denial of service
buffer over-read
ucs-2
ucs-4
application crash
software

EPSS

0.002

Percentile

60.7%

Aspell is vulnerable to denial of service. A buffer over-read for a string ending with a single \0 when the encoding is set to ucs-2 or ucs-4 outside of the application results in an application crash.