CVE catalog

CVE-2019-14468

gnucobol: CVE-2019-14468

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.03% · Oct 25, 2026

GnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangnucobolsid5fixed
Debiangnucobolforky5fixed
Debiangnucoboltrixie5fixed
Debiangnucobolbookworm5fixed
Ubuntugnucobol20.042.2-5vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangnucobolsourcesid3.0~rc1-2lowNot reported[933884]
Debiangnucobolsourceforky3.0~rc1-2lowNot reported[933884]
Debiangnucobolsourcetrixie3.0~rc1-2lowNot reported[933884]
Debiangnucobolsourcebookworm3.0~rc1-2lowNot reported[933884]

[Debian bug #933884]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [gnucobol]Fixed
    Details (2)

    • 5 · amd64 · bookworm

      Fixed · Fixed: 3.0~rc1-2

      dsa · gnucobol · debian · bookworm; dsa · gnucobol · debian · 12

    • 5 · arm64 · bookworm

      Fixed · Fixed: 3.0~rc1-2

      dsa · gnucobol · debian · bookworm; dsa · gnucobol · debian · 12

[Debian 13 (Trixie)]

  • [gnucobol]Fixed
    Details (2)

    • 5 · amd64 · trixie

      Fixed · Fixed: 3.0~rc1-2

      dsa · gnucobol · debian · 13

    • 5 · arm64 · trixie

      Fixed · Fixed: 3.0~rc1-2

      dsa · gnucobol · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]