VDB
ALINUX2-SA-2020%3A0040
ALINUX2-SA-2020%3A0040
PUBLISHED
CVSS 4 MEDIUM
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-18751: An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
Risk Scores
CVSS 3.0
4
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | gettext |
Timeline
- Apr 1, 2020 CVE Published
- Apr 1, 2020 CVE Updated