9.8

CVE-2018-18751: canonical ubuntu_linux Double Free

CVSS: 9.8v3.0CriticalModified
AliasesALPINE-CVE-2018-18751MGASA-2018-0464SUSE-SU-2020:2296-1
Published 28-10-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-18751 is a critical (CVSS 9.8) Double Free vulnerability in canonical ubuntu_linux. EPSS estimates a 4.26% chance of exploitation in the next 30 days, higher than 90.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.0 (NVD)
EPSS score
4.26%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 28-10-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

4.26%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.26% on 19-09-2026

19-09-202619-10-2026
EPSS score
4.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Pocs

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat10 products
  • enterprise_linuxEOL7.0
  • emacs-gettext< 0:0.19.8.1-3.el7 | < 0:0.19.8.1-3.el7_7 | < 0:0.19.8.1-3.el7_6
  • gettext< 0:0.19.8.1-3.el7 | < 0:0.19.8.1-3.el7_7 | < 0:0.19.8.1-3.el7_6 | < 0:0.19.8.1-17.el8
  • gettext-common-devel< 0:0.19.8.1-3.el7 | < 0:0.19.8.1-3.el7_7 | < 0:0.19.8.1-3.el7_6 | < 0:0.19.8.1-17.el8
  • gettext-debuginfo< 0:0.19.8.1-3.el7 | < 0:0.19.8.1-3.el7_7 | < 0:0.19.8.1-3.el7_6 | < 0:0.19.8.1-17.el8
Opensuse8 products
  • gettext-csharp&distro=openSUSE Leap 15.1< 0.19.8.1-lp151.5.3.1
  • gettext-csharp&distro=openSUSE Leap 15.2< 0.19.8.1-lp152.6.3.1
  • gettext-java&distro=openSUSE Leap 15.1< 0.19.8.1-lp151.5.3.1
  • gettext-java&distro=openSUSE Leap 15.2< 0.19.8.1-lp152.6.3.1
  • gettext-runtime-mini&distro=openSUSE Leap 15.1< 0.19.8.1-lp151.5.3.1
Suse5 products
  • gettext-csharp&distro=SUSE Package Hub 15 SP1< 0.19.8.1-bp151.2.1
  • gettext-runtime&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 0.19.8.1-4.8.1
  • gettext-runtime&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2< 0.19.8.1-4.8.1
  • gettext-runtime&distro=SUSE Linux Enterprise Server 12 SP5< 0.19.2-3.3.6
  • gettext-runtime&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 0.19.2-3.3.6
Alpine1 product
  • gettext< 0.20.1-r0
Canonical1 product
Debian1 product
  • gettext< 0.19.8.1-9
Gnu1 product
Mageia1 product
  • gettext< 0.19.8.1-1.1.mga6
Ubuntu1 product
  • gettext< 0.18.3.1-1ubuntu3.1 | < 0.19.7-2ubuntu3.1 | < 0.19.8.1-6ubuntu0.1

9 vendors · 29 products

References

39 links
Show all 39 references