CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7186

Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a long string, as demonstrated by the gplotRead and ptaReadStream functions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.03

EPSS Ranking 86.1%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-7186

Leptonica » Leptonica » Version: 1.42

cpe:2.3:a:leptonica:leptonica:1.42
Leptonica » Leptonica » Version: 1.44

cpe:2.3:a:leptonica:leptonica:1.44
Leptonica » Leptonica » Version: 1.46

cpe:2.3:a:leptonica:leptonica:1.46
Leptonica » Leptonica » Version: 1.48

cpe:2.3:a:leptonica:leptonica:1.48
Leptonica » Leptonica » Version: 1.50

cpe:2.3:a:leptonica:leptonica:1.50
Leptonica » Leptonica » Version: 1.52

cpe:2.3:a:leptonica:leptonica:1.52
Leptonica » Leptonica » Version: 1.54

cpe:2.3:a:leptonica:leptonica:1.54
Leptonica » Leptonica » Version: 1.56

cpe:2.3:a:leptonica:leptonica:1.56
Leptonica » Leptonica » Version: 1.58

cpe:2.3:a:leptonica:leptonica:1.58
Leptonica » Leptonica » Version: 1.60

cpe:2.3:a:leptonica:leptonica:1.60
Leptonica » Leptonica » Version: 1.61

cpe:2.3:a:leptonica:leptonica:1.61
Leptonica » Leptonica » Version: 1.62

cpe:2.3:a:leptonica:leptonica:1.62
Leptonica » Leptonica » Version: 1.63

cpe:2.3:a:leptonica:leptonica:1.63
Leptonica » Leptonica » Version: 1.64

cpe:2.3:a:leptonica:leptonica:1.64
Leptonica » Leptonica » Version: 1.65

cpe:2.3:a:leptonica:leptonica:1.65
Leptonica » Leptonica » Version: 1.66

cpe:2.3:a:leptonica:leptonica:1.66
Leptonica » Leptonica » Version: 1.67

cpe:2.3:a:leptonica:leptonica:1.67
Leptonica » Leptonica » Version: 1.68

cpe:2.3:a:leptonica:leptonica:1.68
Leptonica » Leptonica » Version: 1.69

cpe:2.3:a:leptonica:leptonica:1.69
Leptonica » Leptonica » Version: 1.70

cpe:2.3:a:leptonica:leptonica:1.70
Leptonica » Leptonica » Version: 1.71

cpe:2.3:a:leptonica:leptonica:1.71
Leptonica » Leptonica » Version: 1.72

cpe:2.3:a:leptonica:leptonica:1.72
Leptonica » Leptonica » Version: 1.73

cpe:2.3:a:leptonica:leptonica:1.73
Leptonica » Leptonica » Version: 1.74.0

cpe:2.3:a:leptonica:leptonica:1.74.0
Leptonica » Leptonica » Version: 1.74.1

cpe:2.3:a:leptonica:leptonica:1.74.1
Leptonica » Leptonica » Version: 1.74.2

cpe:2.3:a:leptonica:leptonica:1.74.2
Leptonica » Leptonica » Version: 1.74.3

cpe:2.3:a:leptonica:leptonica:1.74.3
Leptonica » Leptonica » Version: 1.74.4

cpe:2.3:a:leptonica:leptonica:1.74.4
Leptonica » Leptonica » Version: 1.75.0

cpe:2.3:a:leptonica:leptonica:1.75.0
Leptonica » Leptonica » Version: 1.75.1

cpe:2.3:a:leptonica:leptonica:1.75.1
Leptonica » Leptonica » Version: 1.75.2

cpe:2.3:a:leptonica:leptonica:1.75.2
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7186

Products

Pricing

Contact Us