Vulnerability Details CVE-2018-14447
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
- http://hac425.unaux.com/index.php/archives/64/
- https://github.com/martinh/libconfuse/issues/109
- https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html
- http://hac425.unaux.com/index.php/archives/64/
- https://github.com/martinh/libconfuse/issues/109
- https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html
Products affected by CVE-2018-14447
-
cpe:2.3:a:libconfuse_project:libconfuse:3.2.1
-
cpe:2.3:o:debian:debian_linux:8.0