CyberSec.Space Logo
CVEブラウザに戻る

CVE-2018-10771

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0070%
EPSS Percentile10.67th
Published2018年5月7日
Last Modified2024年11月21日

Vulnerability Description

Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Affected Platforms (CPE)

📦
Moinejf

Abcm2ps

<= 8.13.20
💻
Debian

Debian Linux

= 9.0
💻
Fedoraproject

Fedora

= 30
💻
Fedoraproject

Fedora

= 31
💻
Fedoraproject

Fedora

= 32

References & Advisories

🔗 https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2
🔗 https://github.com/leesavide/abcm2ps/issues/17
🔗 https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO/
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y/
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6DUTXB4EC3TQHTTAAIBKJ54GJTF6Y7V/
🔗 https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2
🔗 https://github.com/leesavide/abcm2ps/issues/17

関連する脆弱性情報

CVE-2010-474410.0

Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2...

CVE-2004-125810.0

Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via craft...

CVE-2018-107539.8

Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause ...

CVE-2010-34417.5

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input ...

CVE-2018-10771 Detail & Impact Analysis | CVSS 9.8 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space