Alerts This Week
Warning Icon 1 1,123
Alerts This Week
Warning Icon 1 1,123

Mageia 6: MGASA-2019-0020 Moderate: DISCOUNT DoS Issues

mageia
Calendar Grey January 8, 2019
Dist Mageia Esm H88
MGASA-2019-0020 - Updated discount packages fix security vulnerabilities Publication date: 08 Jan 20
The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (C...

Summary

The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-11468).
DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in in the markdown.c:isfootnote() function. An attacker could exploit this to cause a denial of service (CVE-2018-11503).
DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in in the markdown.c:islist() function. An attacker could exploit this to cause a denial of service (CVE-2018-11504).
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-12495).

References

- https://bugs.mageia.org/show_bug.cgi?id=23540

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/7RPEBFDVJJU7ZJ2OQIKR35QQENJC2EI3/

- https://www.cve.org/CVERecord?id=CVE-2018-11468

- https://www.cve.org/CVERecord?id=CVE-2018-11503

- https://www.cve.org/CVERecord?id=CVE-2018-11504

- https://www.cve.org/CVERecord?id=CVE-2018-12495

Topics%20covered

Topics Covered

security advisory denial of service moderate severity Mageia DISCOUNT

Resolution

SRPMS

- 6/core/discount-2.2.4-1.mga6

Publication date: 08 Jan 2019
URL: https://advisories.mageia.org/MGASA-2019-0020.html
Type: security
CVE: CVE-2018-11468, CVE-2018-11503, CVE-2018-11504, CVE-2018-12495

Topics%20covered

Topics Covered

security advisory denial of service moderate severity Mageia DISCOUNT

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here