{"id":"CVE-2018-17942","details":"The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\\0' character during %f processing.","modified":"2026-07-08T20:04:57.871110Z","published":"2018-10-03T08:29:00.430Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:gnu:gnulib:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2018-09-23"}],"source":"CPE_RANGE","vendor_product":"gnu:gnulib"},{"extracted_events":[{"fixed":"2018-09-23"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5UQRNQE6XHMD5UYYHAU3VQWAYHIPMQS/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGHTVYH3KAFN34QXNSGEQDSTV7MCOQW/"},{"type":"FIX","url":"https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35"},{"type":"EVIDENCE","url":"https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html"},{"type":"EVIDENCE","url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/coreutils/gnulib","events":[{"introduced":"0"},{"fixed":"278b4175c9d7dd47c1a3071554aac02add3b3c35"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v0.1","v0.0","cvs-readonly","kfs_20030524_pre","RMAIL-MBOX-BASE","FILEUTILS-4_1_9","SH-UTILS-2_0_12","FILEUTILS-4_1_8","lexbind-before-merge-20030404","FILEUTILS-4_1_7","FILEUTILS-4_1_6","TEXTUTILS-2_0_21","TEXTUTILS-2_0_20","FILEUTILS-4_1_5","FILEUTILS-4_1_4","TEXTUTILS-2_0_19","FILEUTILS-4_1_3","TEXTUTILS-2_0_18","FILEUTILS-4_1_2","TEXTUTILS-2_0_17","FILEUTILS-4_1_1","emacs-unicode-base","TEXTUTILS-2_0_16","TEXTUTILS-2_0_15","CPPI-1_10","CPPI-1_9","EMACS_21_1","FILEUTILS-4_0_45","FILEUTILS-4_0_43","FILEUTILS-4_0_42","TEXTUTILS-2_0_12","FILEUTILS-4_0_41","FILEUTILS-4_0_39","FILEUTILS-4_0_38","EMACS_PRETEST_21_0_103","FILEUTILS-4_0_37","FILEUTILS-4_0_36","FILEUTILS-4_0_35","FILEUTILS-4_0_34","TEXTUTILS-2_0_10","CPPI-1_8","TEXTUTILS-2_0_9","FILEUTILS-4_0_33","FILEUTILS-4_0_32","FILEUTILS-4_0_31","FILEUTILS-4_0_30","EMACS_PRETEST_21_0_95","FILEUTILS-4_0_29","SH-UTILS-2_0_11","FILEUTILS-4_0_28","TEXTUTILS-2_0_8","FILEUTILS-4_0_27","FILEUTILS-4_0z","FILEUTILS-4_0y","TEXTUTILS-2_0g","FILEUTILS-4_0x","SH-UTILS-2_0j","TEXTUTILS-2_0f","FILEUTILS-4_0w","FILEUTILS-4_0v","raeburn-tag-4-for-export","FILEUTILS-4_0u","FILEUTILS-4_0t","FILEUTILS-4_0s","SH-UTILS-2_0i","SH-UTILS-2_0h","FILEUTILS-4_0r","SH-UTILS-2_0g","TEXTUTILS-2_0e","FILEUTILS-4_0q","SH-UTILS-2_0f","SH-UTILS-2_0e","SH-UTILS-2_0d","TEXTUTILS-2_0c","SH-UTILS-2_0c","SH-UTILS-2_0b","SH-UTILS-2_0a","FILEUTILS-4_0m","TEXTUTILS-2_0a","FILEUTILS-4_0l","FILEUTILS-4_0k","FILEUTILS-4_0j-trial","SH-UTILS-2_0","SH-UTILS-1_16m","TEXTUTILS-2_0","TEXTUTILS-1_22q","TEXTUTILS-1_22p","TEXTUTILS-1_22o","TEXTUTILS-1_22n","FILEUTILS-4_0i","SH-UTILS-1_16k","TEXTUTILS-1_22m","TEXTUTILS-1_22l","TEXTUTILS-1_22k","SH-UTILS-1_16h","FILEUTILS-4_0g","TEXTUTILS-1_22j","TEXTUTILS-1_22i","FILEUTILS-4_0f","FILEUTILS-4_0e","SH-UTILS-1_16f","TEXTUTILS-1_22h","EMACS_20_4","TEXTUTILS-1_22g","FILEUTILS-4_1-b3","FILEUTILS-4_1-b2","FILEUTILS-4_1-b1","FILEUTILS-4_0","FILEUTILS-4_0-b7","FILEUTILS-4_0-b6","FILEUTILS-4_0-b4","FILEUTILS-4_0-b3","FILEUTILS-4_0-b2","FILEUTILS-4_0-pre1","FILEUTILS-3_16z","FILEUTILS-3_16x","FILEUTILS-3_16w","FILEUTILS-3_16v","FILEUTILS-3_16u","FILEUTILS-3_16t","FILEUTILS-3_16s","FILEUTILS-3_16r","FILEUTILS-3_16q","FILEUTILS-3_16p","TEXTUTILS-1_22f","FILEUTILS-3_16n","FILEUTILS-3_16m","FILEUTILS-3_16l","FILEUTILS-3_16k","TEXTUTILS-1_22d","FILEUTILS-3_16j","FILEUTILS-3_16i","FILEUTILS-3_16h","FILEUTILS-3_16g","TEXTUTILS-1_22c","post-jumbo-LFS","pre-jumbo-LFS","TEXTUTILS-1_22a","SH-UTILS-1_16d","EMACS_20_2","SH-UTILS-1_16c","SH-UTILS-1_16b","SH-UTILS-1_16a","SH-UTILS-1_16","SH-UTILS-1_15a","TEXTUTILS-1_21a","SH-UTILS-1_15","FILEUTILS-3_14b","TEXTUTILS-1_20b","TEXTUTILS-1_20a","SH-UTILS-1_14","FILEUTILS-3_13k","SH-UTILS-1_12t","TEXTUTILS-1_19r","FILEUTILS-3_13j","SH-UTILS-1_12r","TEXTUTILS-1_19q","SH-UTILS-1_12p","FILEUTILS-3_13h","TEXTUTILS-1_19o","TEXTUTILS-1_19n","SH-UTILS-1_12o","FILEUTILS-3_13g","FILEUTILS-3_13f","TEXTUTILS-1_19m","TEXTUTILS-1_19g","FILEUTILS-3_13c","TEXTUTILS-1_19d","FILEUTILS-3_13","FILEUTILS-3_12s","FILEUTILS-3_12r","TEXTUTILS-1_18e","TEXTUTILS-1_18","TEXTUTILS-1_14d","TEXTUTILS-1_14c","FILEUTILS-3_12m","FILEUTILS-3_12l","TEXTUTILS-1_14b","SH-UTILS-1_12g","SH-UTILS-1_12f","FILEUTILS-3_12j","SH-UTILS-1_12d","TEXTUTILS-1_14a","TEXTUTILS-1_14","TEXTUTILS-1_13j","FILEUTILS-3_12g","TEXTUTILS-1_13i","TEXTUTILS-1_13g","FILEUTILS-3_12f","TEXTUTILS-1_13","FILEUTILS-3_12a","SH-UTILS-1_12a","textutils-1_12_1","ss-950614-22h58-1_11_5a","ss-950520-08h12-sync-tu","ss-940725-22h45","merge-with-1_9_4k","TEXTUTILS-1_8b","FILEUTILS-3_8_3b","pre-version","version-3_4_4-tentative","version-3_4_2-to-fsf","pre-getopt","ctype-fix"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17942.json","vanir_signatures_modified":"2026-07-08T20:04:57Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["229386864100362742395171523966439953396","272341287738193040027583357173502084572","260935206951781656671285336310863070516","258324227169521172141694111686821196115"],"threshold":0.9},"id":"CVE-2018-17942-27bc3964","signature_type":"Line","signature_version":"v1","source":"https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35","target":{"file":"lib/vasnprintf.c"}},{"target":{"file":"lib/vasnprintf.c","function":"convert_to_decimal"},"deprecated":false,"digest":{"length":816,"function_hash":"269350412939707273940773259891075763573"},"id":"CVE-2018-17942-a6fdad85","signature_type":"Function","signature_version":"v1","source":"https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35"},{"signature_version":"v1","source":"https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35","target":{"file":"tests/test-vasnprintf.c"},"deprecated":false,"digest":{"line_hashes":["131391253255561766648621509591014579029","133734765937967660399959801886915531128","46393908124578637128160449109458356407","202363911030448863139018023131591996039"],"threshold":0.9},"id":"CVE-2018-17942-d2e104c4","signature_type":"Line"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}