GNU Texinfo vulnerabilities

2 CVEs affecting GNU Texinfo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4810, published 2006-11-08.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4810, published 2006-11-08. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a…
• CVE-2005-3011, published 2005-09-21. Low severity, CVSS 1.2. EPSS: 0.5% chance of exploitation in the next 30 days. The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.