CVE-2018-11468

MEDIUM 5.5CVE-2018-11468 · Published 25/05/2018 · updated 17/06/2026

In short

CVE-2018-11468 is a MEDIUM (CVSS 5.5) vulnerability affecting discount (discount project).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
discount discount_project	`= 2.2.3`	No fix yet

Description

The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.

References

Orc/discount · Exploit
lists.debian.org/debian-lts-announce/2018/09/msg00009.html · Mailing List
debian.org/security/2018/dsa-4293 · Third Party Advisory

More vulnerabilities in discount

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free