CVE-2018-20304

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-20304

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20304.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-20304

Published

2018-12-20T00:29:00.427Z

Modified

2026-03-14T09:28:56.605868Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long second argument. NOTE: this is not a Microsoft product.

References

https://github.com/devinsmith/libexcel/issues/9

Affected packages

Git / github.com/devinsmith/libexcel

Affected ranges

Type

GIT

Repo

https://github.com/devinsmith/libexcel

Events

Introduced

Last affected

551ebc577e6e71e7d3500d5466075c561082ca80

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.01"
        }
    ]
}

Affected versions

v0.*

v0.01

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20304.json"