DEBIAN-CVE-2018-25154
- Source
- https://security-tracker.debian.org/tracker/CVE-2018-25154
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-25154.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2018-25154
- Upstream
- Published
- 2025-12-24T20:15:50Z
- Modified
- 2026-09-01T20:03:59Z
- Severity
-
- 8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- [none]
- Details
-
GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system.
- References
Affected packages
Debian:12 / barcode
Package
- Name
- barcode
- Purl
- pkg:deb/debian/barcode?arch=source&distro=bookworm
Debian:13 / barcode
Package
- Name
- barcode
- Purl
- pkg:deb/debian/barcode?arch=source&distro=trixie
Debian:14 / barcode
Package
- Name
- barcode
- Purl
- pkg:deb/debian/barcode?arch=source&distro=forky