Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-11504

Опубликовано: 26 мая 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

not-affected

2.2.4-1
devel

not-affected

2.2.4-1
disco

not-affected

2.2.4-1
eoan

not-affected

2.2.4-1
esm-apps/bionic

needed

esm-apps/focal

not-affected

2.2.4-1
esm-apps/xenial

needed

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [2.1.7-1+deb8u1build0.14.04.1]]

Показывать по

EPSS

Процентиль: 47%
0.00241
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.4
redhat
больше 7 лет назад

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

CVSS3: 5.5
nvd
больше 7 лет назад

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

CVSS3: 5.5
debian
больше 7 лет назад

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a ...

CVSS3: 5.5
github
больше 3 лет назад

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

EPSS

Процентиль: 47%
0.00241
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3