CVE-2018-17076
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a...
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
CVE-2018-17076- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
CVE-2018-17076- Updated
- 2026-11-02
EUVDEUVD-2018-8856 No score
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
EUVD-2018-8856- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gw2g-5r47-23jh
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a...
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
GHSA-gw2g-5r47-23jh- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
CVE-2018-17076- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-17076
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
DEBIAN-CVE-2018-17076- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-17076
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
- Record
UBUNTU-CVE-2018-17076- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13313-1 No score
gpp-2.28-1.1 on GA media
These are all security issues fixed in the gpp-2.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13313-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gppDebian:12 |
before 2.26-1 | 2.26-1 |
gppDebian:13 |
before 2.26-1 | 2.26-1 |
gppDebian:14 |
before 2.26-1 | 2.26-1 |
gppUbuntu:16.04:LTS |
All versions, plus listed versions 2.24-3 |
None known |
gppUbuntu:18.04:LTS |
All versions, plus listed versions 2.24-32.24-3build1 |
None known |
gppUbuntu:20.04:LTS |
All versions, plus listed versions 2.25-1 |
None known |
gppopenSUSE:Tumbleweed |
before 2.28-1.1 | 2.28-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-17076 is a high vulnerability (CVSS 8.8) in Logological General-purpose Preprocessor, published September 16, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in gpp 2.26-1.