CVE-2018-25154 GNU Barcode 0.99 Buffer Overflow in Code 93 Encoding Mechanism
HighCVSS 8.5
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/barcode(Debian:12) | All versions | No fix listed |
| debian/barcode(Debian:12) | = 0.99-6 | No fix listed |
| debian/barcode(Debian:12) | = 0.99-7 | No fix listed |
| debian/barcode(Debian:12) | = 0.99-8 | No fix listed |
| debian/barcode(Debian:12) | = 0.99-9 | No fix listed |
| debian/barcode(Debian:13) | All versions | No fix listed |
| debian/barcode(Debian:13) | = 0.99-9 | No fix listed |
| debian/barcode(Debian:14) | All versions | No fix listed |
| debian/barcode(Debian:14) | = 0.99-9 | No fix listed |
| ubuntu/barcode(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/barcode(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/barcode(Ubuntu:26.10) | All versions | No fix listed |
| The GNU Project | Free Software Foundation, Inc. GNU Barcode | = 0.99 | No fix listed |
| ubuntu/barcode(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-25154 vendor-advisory
- FSF Directory Entry for Barcode product
- ExploitDB-44797 exploit
- GNU Barcode Official Product Page product