{"id":"CVE-2018-17937","details":"gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.","modified":"2026-08-07T11:31:24.128765280Z","published":"2019-03-13T17:29:00.227Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"microjson_project:microjson","cpes":["cpe:2.3:a:microjson_project:microjson:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0"},{"last_affected":"1.3"}]},{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107029"},{"type":"ADVISORY","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-310-01"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00040.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00024.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202009-17"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/gpsd/gpsd","events":[{"introduced":"b51f606e6ee2bb0da2199ba6b8f7ad4cac472146"},{"last_affected":"18bc54e3ef722495a7ff84db7321c1a399806149"}],"database_specific":{"cpe":"cpe:2.3:a:gpsd_project:gpsd:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.90"},{"last_affected":"3.17"}],"source":"CPE_RANGE"}}],"versions":["release-3.17","release-3.16","release-3.15","release-3.14","release-3.13","release-3.12","release-3.11","release-3.10","release-3.9","release-3.8","release-3.7","release-3.6","release-3.5","release-3.4","release-3.3","release-3.2","Hejira","release-3.1","release-3.0","release-2.96","release-2.95","release-2.94","release-2.93","subversion-cutover","release-2.92","release-2.91","release-2.90"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17937.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}