 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2018-17942 |
| Description: | The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.877379 1.3.6.1.4.1.25623.1.1.1.2.2018.1543 1.3.6.1.4.1.25623.1.0.876195 1.3.6.1.4.1.25623.1.0.877384 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2018-17942 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMGHTVYH3KAFN34QXNSGEQDSTV7MCOQW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5UQRNQE6XHMD5UYYHAU3VQWAYHIPMQS/ https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35 https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686 |