{"id":"CVE-2018-17336","details":"UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.","modified":"2026-07-08T05:52:24.159271563Z","published":"2018-09-22T16:29:00.947Z","related":["SUSE-SU-2018:3278-1","openSUSE-SU-2024:11479-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"18.04"},{"last_affected":"18.04"}]}]},"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2178"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3772-1/"},{"type":"FIX","url":"https://github.com/storaged-project/udisks/issues/578"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/storaged-project/udisks","events":[{"introduced":"a72b73de34cbe75cb1c0c5129fded2fe844283db"},{"last_affected":"a72b73de34cbe75cb1c0c5129fded2fe844283db"}],"database_specific":{"cpe":"cpe:2.3:a:freedesktop:udisks:2.8.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.8.0"},{"last_affected":"2.8.0"}],"source":"CPE_STRING"}}],"versions":["2.8.0","udisks-2.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17336.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}