CVE-2018-17942

Published: Oct 3, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35

x_refsource_MISC

https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686

x_refsource_MISC

https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html

x_refsource_MISC

FEDORA-2020-acac61cfd0

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-663f619e9c

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-17942

Description

Affected Products

References