CVE-2023-4156: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

Affected products

• Fedoraproject Fedora: version 38 only
• GNU Gawk: before 5.1.1 (fixed in 5.1.1)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only

Published 2023-09-25. Last modified 2026-06-17.