CVE-2018-11468

CVE-2018-11468 concerns the DISCOUNT Markdown engine (DISCOUNT 2.2.3a) where the __mkd_trim_line function in mkdio.c within libmarkdown.a is vulnerable to a heap-based buffer over-read via a crafted file, enabling a Denial of Service. Public advisories across distributions confirm the affected co...

CVE-2018-12495

CVE-2018-12495 affects the DISCOUNT Markdown implementation (DISCOUNT 2.2.3a) via the quoteblock function in markdown.c in libmarkdown.a, causing a heap-based buffer over-read that can lead to denial of service. Several connected sources confirm related issues and fixes: CVE-2018-11468 (mkdio.c:_...

CVE-2018-11503

CVE-2018-11503 concerns the isfootnote() function in markdown.c of DISCOUNT 2.2.3a, where a crafted file can cause a heap-based buffer over-read leading to denial of service. Connected sources confirm multiple reports of this family of issues (CVE-2018-11468, CVE-2018-11504, CVE-2018-12495) acros...

CVE-2018-11504

The CVE-2018-11504 issue affects the DISCOUNT Markdown parser (DISCOUNT 2.2.3a) specifically the islist function in markdown.c within libmarkdown.a, allowing a crafted file to trigger a heap-based buffer over-read and cause a denial of service. Public advisories in connected documents confirm the...