CVE-2018-3836
An exploitable command injection vulnerability exists in the gplotMakeOutput function of...
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
CVE-2018-3836- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2018-15622
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
EUVD-2018-15622- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv24-gr2j-qp4r
An exploitable command injection vulnerability exists in the gplotMakeOutput function of...
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
GHSA-jv24-gr2j-qp4r- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
NVD
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
CVE-2018-3836- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-78
- Updated
- 2026-11-02
OSV
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
CVE-2018-3836- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-3836
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
DEBIAN-CVE-2018-3836- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2018-3836
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
- Record
UBUNTU-CVE-2018-3836- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0154 No score
Updated leptonica packages fix a security vulnerability
Package leptonica has been updated to the current stable version 1.75.2 which fixes a security issue (potential injection attack using gplot rootdir) reported in CVE-2018-3836.
- Record
MGASA-2018-0154- Updated
- 2026-11-02
OSVMGASA-2018-0279 No score
Updated leptonica packages fix security vulnerabilities
This update fixes a security issue (potential injection attack using gplot rootdir) originally reported in CVE-2018-3836.
This fix was incomplete and again reported in CVE-2018-7440 and CVE-2018-7442. The improved fix is included in leptonica-1.76.0.
- Record
MGASA-2018-0279- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10914-1 No score
leptonica-devel-1.80.0-1.9 on GA media
These are all security issues fixed in the leptonica-devel-1.80.0-1.9 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10914-1- Updated
- 2026-11-02
OSVUSN-4819-1 No score
leptonlib vulnerabilities
It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-18196)
It was discovered that Leptonica incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2018-3836)
It was discovered that Leptonica incorrectly handled input arguments. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2018-7186)
- Record
USN-4819-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
leptonlibDebian:12 |
before 1.75.3-1 | 1.75.3-1 |
leptonlibDebian:13 |
before 1.75.3-1 | 1.75.3-1 |
leptonlibDebian:14 |
before 1.75.3-1 | 1.75.3-1 |
leptonlibDebian:7 |
before 1.69-3.1+deb7u1, plus listed versions 1.69-3.1 |
1.69-3.1+deb7u1 |
leptonicaMageia:6 |
before 1.75.2-1.mga6 | 1.75.2-1.mga6 |
leptonicaMageia:6 From an advisory covering 3 CVEs |
before 1.76.0-1.mga6 | 1.76.0-1.mga6 |
leptonlibUbuntu:Pro:14.04:LTS |
before 1.70.1-1ubuntu0.1~esm1, plus listed versions 1.69-4ubuntu11.69-4ubuntu21.69-4ubuntu31.69-4ubuntu41.70.1-1 |
1.70.1-1ubuntu0.1~esm1 |
leptonlibUbuntu:Pro:16.04:LTS |
before 1.73-1ubuntu0.1~esm1, plus listed versions 1.72-31.72-3build11.73-1 |
1.73-1ubuntu0.1~esm1 |
leptonlibUbuntu:Pro:14.04:LTS From an advisory covering 3 CVEs |
before 1.70.1-1ubuntu0.1~esm1, plus listed versions 1.69-4ubuntu11.69-4ubuntu21.69-4ubuntu31.69-4ubuntu41.70.1-1 |
1.70.1-1ubuntu0.1~esm1 |
leptonlibUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 1.73-1ubuntu0.1~esm1, plus listed versions 1.72-31.72-3build11.73-1 |
1.73-1ubuntu0.1~esm1 |
leptonicaopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 1.80.0-1.9 | 1.80.0-1.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-3836 is a high vulnerability (CVSS 7.0) in Dan Bloomberg Leptonica, published February 15, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. Fixed in leptonlib 1.75.3-1.
References
lists.debian.org/debian-lts-announce/2018/02/msg00019.html
talosintelligence.com/vulnerability_reports/TALOS-2018-0516
nvd.nist.gov/vuln/detail/CVE-2018-3836
github.com/advisories/GHSA-jv24-gr2j-qp4r
security-tracker.debian.org/tracker/CVE-2018-3836
advisories.mageia.org/MGASA-2018-0154.html
Show 17 moreShow less
bugs.mageia.org/show_bug.cgi?id=22591
bugzilla.redhat.com/show_bug.cgi?id=1549735
ubuntu.com/security/CVE-2018-3836
cve.org/CVERecord?id=CVE-2018-3836
suse.com/security/cve/CVE-2017-18196