CVE-2018-17942

The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing…

published October 3, 2018

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02494 · 84.5th percentile
Published
2018-10-03T08:00Z
EPSS history
Timeline
  • 03 OCT 08:00Z
    The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing…
    cvelistv5