CVE-2018-20593: Buffer Overflow
Published Dec 30, 2018
·Updated
In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scanfile function in mxmldoc.c.
Affected Software
3 affected components
Msweet Mini-xml=2.12
Fedoraproject Fedora=28
Fedoraproject Fedora=29
Event History
Dec 30, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20593?
CVE-2018-20593 has a medium severity rating due to the potential for a stack-based buffer overflow.
2
How do I fix CVE-2018-20593?
To fix CVE-2018-20593, update Mini-XML to version 2.12 or later, if available.
3
Which versions are affected by CVE-2018-20593?
CVE-2018-20593 affects Mini-XML version 2.12 and certain versions of Fedora 28 and 29.
4
What type of vulnerability is CVE-2018-20593?
CVE-2018-20593 is classified as a stack-based buffer overflow vulnerability.
5
What function is responsible for the vulnerability in CVE-2018-20593?
The vulnerability in CVE-2018-20593 is caused by the scan_file function in the mxmldoc.c file.