medium5.5
CVE-2018-12495
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) vi…
Impact
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Discount Project | Discount | Version 2.2.3 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Orc/discount/issues/189#issuecomment-397541501
- https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html
- https://www.debian.org/security/2018/dsa-4293
- https://github.com/Orc/discount/issues/189#issuecomment-397541501
- https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html
- https://www.debian.org/security/2018/dsa-4293