PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2018-18751

CVE-2018-18751

gettext: double free in default_add_message in read-catalog.c

Loading…

Severity

Low

Red Hat Product Security

4

CVSS 3.0

Review impact separately from score.

Published · October 28, 2018

Updated · November 22, 2025

Description

An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

Statement

This issue affects the versions of gettext as shipped with Red Hat Enterprise Linux 7.

This issue did not affect the versions of gettext as shipped with Red Hat Enterprise Linux 5 and 6.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 4
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-416 · Use After Free