CVE catalog

CVE-2021-46022

recutils: CVE-2021-46022

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.97% · Oct 25, 2026

An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrecutilssid1.9-4vulnerable
Debianrecutilsforky1.9-4vulnerable
Debianrecutilsbookworm1.9-2vulnerable
Ubunturecutilspro1.8-1vulnerable
Ubunturecutilspro1.8-1ubuntu0.22.04.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrecutilssourcesid(unfixed)unimportantNot reportedNot reported
Debianrecutilssourceforky(unfixed)unimportantNot reportedNot reported
Debianrecutilssourcebookworm(unfixed)unimportantNot reportedNot reported
Ubunturecutilsdebpro1.8-1ubuntu0.22.04.1~esm1Not reportedUBUNTU-CVE-2021-46022Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [librec1]Affected

    Source package: [recutils]

    Details (2)
    • 1.9-2 · amd64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

    • 1.9-2 · arm64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

  • [librec-dev]Affected

    Source package: [recutils]

    Details (2)
    • 1.9-2 · amd64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

    • 1.9-2 · arm64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

  • [recutils]Affected
    Details (2)
    • 1.9-2 · amd64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

    • 1.9-2 · arm64 · bookworm

      Affected

      dsa · recutils · debian · bookworm; dsa · recutils · debian · 12

Observed:

References