CVE-2018-18751 An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgf...
CriticalCVSS 9.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gettext(Debian:12) | < 0.19.8.1-9 | 0.19.8.1-9 |
| debian/gettext(Debian:13) | < 0.19.8.1-9 | 0.19.8.1-9 |
| debian/gettext(Debian:14) | < 0.19.8.1-9 | 0.19.8.1-9 |
| GNU gettext | = 0.19.8 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| alpine/gettext(Alpine:v3.11) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.12) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.13) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.14) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.15) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.16) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.17) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.18) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.19) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.20) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.21) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.22) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.23) | < 0.20.1-r0 | 0.20.1-r0 |
| alpine/gettext(Alpine:v3.24) | < 0.20.1-r0 | 0.20.1-r0 |
References
- Debian Security Tracker CVE-2018-18751 vendor-advisory
- openSUSE-SU-2020:1270 vendor-advisory
- openSUSE-SU-2020:1278 vendor-advisory
- openSUSE-SU-2020:1385 vendor-advisory
- RHSA-2019:3643 vendor-advisory
- github.com exploit third-party-advisory
- github.com exploit third-party-advisory
- USN-3815-1 third-party-advisory vendor-advisory
- USN-3815-2 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking