medium5.5
CVE-2018-11503
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) vi…
Impact
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Discount Project | Discount | Version 2.2.3 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Orc/discount/issues/189#issuecomment-392247798
- https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html
- https://www.debian.org/security/2018/dsa-4293
- https://github.com/Orc/discount/issues/189#issuecomment-392247798
- https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html
- https://www.debian.org/security/2018/dsa-4293