| Package | Affected versions | Patched versions |
|---|---|---|
| gnulib | < 2018-09-23 | 2018-09-23 |
The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free