CVE-2018-10753
CRITICALabcm2ps < 8.13.20 - Stack-based Buffer Overflow in Delayed Output Function
Title source: llmDescription
Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
References (6)
Core 6
Core References
Third Party Advisory x_refsource_misc
https://github.com/leesavide/abcm2ps/issues/16
Third Party Advisory x_refsource_misc
https://drive.google.com/drive/u/2/folders/1DvBEh5D-eW4UkvX3947UQh62i7hUIFN1
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6DUTXB4EC3TQHTTAAIBKJ54GJTF6Y7V/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO/
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
Scores
CVSS v3
9.8
EPSS
0.0275
EPSS Percentile
84.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (5)
debian/debian_linux
9.0
fedoraproject/fedora
30
fedoraproject/fedora
31
fedoraproject/fedora
32
moinejf/abcm2ps
< 8.13.20
Published
May 05, 2018
Tracked Since
Feb 18, 2026