CVE-2023-49992

Publication date 12 December 2023

Last updated 26 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

5.3 · Medium

Score breakdown

Description

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.

Status

Package Ubuntu Release Status
espeak-ng 24.04 LTS noble
Not affected
23.10 mantic
Fixed 1.51+dfsg-11ubuntu0.1
23.04 lunar Ignored end of life, was needed
22.04 LTS jammy
Fixed 1.50+dfsg-10ubuntu0.1
20.04 LTS focal
Fixed 1.50+dfsg-6ubuntu0.1
18.04 LTS bionic
Fixed 1.49.2+dfsg-1ubuntu0.1~esm1
16.04 LTS xenial Not in release
14.04 LTS trusty Not in release

Get expanded security coverage with Ubuntu Pro

Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.

Get Ubuntu Pro 30-day free trial

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
espeak-ng

Severity score breakdown

CVSS version: CVSS v3.0

Base score 5.3 · Medium

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

References

Related Ubuntu Security Notices (USN)

    • USN-6858-1
    • eSpeak NG vulnerabilities
    • 1 July 2024

Other references

Access our resources on patching vulnerabilities