This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-17937 →

DEBIAN-CVE-2018-17937

gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote atta...

Original description

The description as published by the source.

gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 gpsd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17-6"}]}]

Debian:13 gpsd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17-6"}]}]

Debian:14 gpsd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17-6"}]}]

References

advisory security-tracker.debian.org