What’s Vulnerable › Vulnerabilities

CVE-2018-14447

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-07-20 · updated 2026-06-17
• Weakness: CWE-125

Description

trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.

Affected products

• Debian Linux: 8.0
• Libconfuse Project Libconfuse: 3.2.1

References

• http://hac425.unaux.com/index.php/archives/64/
• https://github.com/martinh/libconfuse/issues/109
• https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html
• http://hac425.unaux.com/index.php/archives/64/
• https://github.com/martinh/libconfuse/issues/109
• https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html

Get alerted when CVE-2018-14447 or the next vulnerability affects your stack