CVE-2018-11503
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers...
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
CVE-2018-11503- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
CVE-2018-11503- Updated
- 2026-11-02
EUVDEUVD-2018-3532 No score
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
EUVD-2018-3532- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3g9x-rvrx-gr8q
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers...
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
GHSA-3g9x-rvrx-gr8q- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
CVE-2018-11503- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-11503
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
DEBIAN-CVE-2018-11503- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-11503
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
- Record
UBUNTU-CVE-2018-11503- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0020 No score
Updated discount packages fix security vulnerabilities
The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-11468).
DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:isfootnote() function. An attacker could exploit this to cause a denial of service (CVE-2018-11503).
DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:islist() function. An attacker could exploit this to cause a denial of service (CVE-2018-11504).
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-12495).
- Record
MGASA-2019-0020- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
discountDebian:12 |
before 2.2.4-1 | 2.2.4-1 |
discountDebian:13 |
before 2.2.4-1 | 2.2.4-1 |
discountDebian:14 |
before 2.2.4-1 | 2.2.4-1 |
discountDebian:8 |
before 2.1.7-1+deb8u1, plus listed versions 2.1.7-1 |
2.1.7-1+deb8u1 |
discountDebian:9 |
before 2.2.2-1+deb9u1, plus listed versions 2.2.2-1 |
2.2.2-1+deb9u1 |
discountMageia:6 |
before 2.2.4-1.mga6 | 2.2.4-1.mga6 |
discountUbuntu:14.04:LTS |
before 2.1.7-1+deb8u1build0.14.04.1, plus listed versions 2.1.6-22.1.7-1 |
2.1.7-1+deb8u1build0.14.04.1 |
discountUbuntu:16.04:LTS |
All versions, plus listed versions 2.1.8-2 |
None known |
discountUbuntu:18.04:LTS |
All versions, plus listed versions 2.1.8-22.2.3b8-2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-11503 is a medium vulnerability (CVSS 5.5) in Discount Project Discount, published May 26, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 75th percentile. Fixed in discount 2.2.4-1.