Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2018-12495

discount: heap-based buffer over-read via a crafted file

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Discount Project
Products
Debian Linux Discount
CVE-2018-11504

discount: Heap-based buffer-overflow in markdown.c:islist() allows for denial of service

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Discount Project
Products
Debian Linux Discount
CVE-2018-11503

discount: Heap-based buffer-overflow in markdown.c:isfootnote() allows for denial of service

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Discount Project
Products
Debian Linux Discount
CVE-2018-11468

discount: heap-based buffer over-read __mkd_trim_line function in mkdio.c

The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Discount Project
Products
Debian Linux Discount