CVE-2018-18751

🗓️ 28 Oct 2018 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 464 Views

An issue in GNU gettext 0.19.8 leads to a double free vulnerability

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by gettext vulnerability CVE-2018-18751	29 Mar 201911:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by GNU gettext vulnerability CVE-2018-18751	15 Jan 202114:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU gettext affects IBM Spectrum Protect Plus (CVE-2018-18751)	3 Jun 202101:37	–	ibm
Tenable Nessus	Amazon Linux 2 : gettext (ALAS-2020-1477)	26 Aug 202000:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gettext (ALSA-2019:3643)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gettext (CESA-2019:3643)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 7 : gettext (RHSA-2020:1138)	10 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : gettext (EulerOS-SA-2019-1966)	23 Sep 201900:00	–	nessus

NVD

Node

gnu gettextMatch0.19.8

Node

Node

Source	Link
usn	www.usn.ubuntu.com/3815-2/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html
access	www.access.redhat.com/errata/RHSA-2019:3643
github	www.github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption
github	www.github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html
usn	www.usn.ubuntu.com/3815-1/

21 Nov 2024 03:56Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 39.8

EPSS0.00555