CVE-2018-10771
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows...
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
CVE-2018-10771- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
CVE-2018-10771- Updated
- 2026-11-02
EUVDEUVD-2018-2841No score
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
EUVD-2018-2841- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4v6g-m96g-x25q
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows...
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
GHSA-4v6g-m96g-x25q- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSV
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
CVE-2018-10771- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-10771
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
DEBIAN-CVE-2018-10771- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-10771
Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Record
UBUNTU-CVE-2018-10771- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-5961-1No score
abcm2ps vulnerabilities
It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2018-10753, CVE-2018-10771, CVE-2019-1010069)
Chiba of Topsec Alpha Lab discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service. (CVE-2021-32434, CVE-2021-32435, CVE-2021-32436)
- Record
USN-5961-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abcm2psDebian:12 | before 8.14.2-0.1 | 8.14.2-0.1 |
abcm2psDebian:13 | before 8.14.2-0.1 | 8.14.2-0.1 |
abcm2psDebian:14 | before 8.14.2-0.1 | 8.14.2-0.1 |
abcm2psDebian:9 From an advisory covering 6 CVEs | before 7.8.9-1+deb9u1, plus listed versions 7.8.9-1 | 7.8.9-1+deb9u1 |
abcm2psUbuntu:Pro:16.04:LTS | before 7.8.9-1ubuntu0.16.04.1~esm1, plus listed versions 7.8.9-1 | 7.8.9-1ubuntu0.16.04.1~esm1 |
abcm2psUbuntu:18.04:LTS | before 7.8.9-1+deb9u1build0.18.04.1, plus listed versions 7.8.9-17.8.9-1build1 | 7.8.9-1+deb9u1build0.18.04.1 |
abcm2psUbuntu:Pro:16.04:LTS From an advisory covering 6 CVEs | before 7.8.9-1ubuntu0.16.04.1~esm1, plus listed versions 7.8.9-1 | 7.8.9-1ubuntu0.16.04.1~esm1 |
abcm2psUbuntu:18.04:LTS From an advisory covering 6 CVEs | before 7.8.9-1+deb9u1build0.18.04.1, plus listed versions 7.8.9-17.8.9-1build1 | 7.8.9-1+deb9u1build0.18.04.1 |
abcm2psUbuntu:Pro:20.04:LTS From an advisory covering 6 CVEs | before 8.14.6-0.1ubuntu0.1~esm1, plus listed versions 8.14.2-0.28.14.5-0.18.14.6-0.1 | 8.14.6-0.1ubuntu0.1~esm1 |
abcm2psUbuntu:Pro:22.04:LTS From an advisory covering 6 CVEs | before 8.14.11-0.1ubuntu0.1~esm1, plus listed versions 8.14.11-0.1 | 8.14.11-0.1ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-10771 is a critical vulnerability (CVSS 9.8) in Moinejf Abcm2ps, published May 7, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.05%, the 87th percentile. Fixed in abcm2ps 8.14.2-0.1.
References
drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2
github.com/leesavide/abcm2ps/issues/17
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y
lists.debian.org/debian-lts-announce/2022/04/msg00015.html
Show 15 moreShow less
nvd.nist.gov/vuln/detail/CVE-2018-10771
security-tracker.debian.org/tracker/CVE-2018-10771
ubuntu.com/security/CVE-2018-10771
cve.org/CVERecord?id=CVE-2018-10771