CVE-2018-11468

Name	CVE-2018-11468
Description	The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1499-1, DSA-4293-1
Debian Bugs	901912

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
discount (PTS)	bullseye	2.2.6-1	fixed
	bookworm	2.2.7-2	fixed
	forky, sid, trixie	2.2.7-2.1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
discount	source	jessie	2.1.7-1+deb8u1	DLA-1499-1
discount	source	stretch	2.2.2-1+deb9u1	DSA-4293-1
discount	source	(unstable)	2.2.4-1		901912

Notes

https://github.com/Orc/discount/issues/189
POC: https://github.com/fCorleone/fuzz_programs/blob/master/discount/issue1_testcase
Fixed by https://github.com/Orc/discount/commit/b002a5a4db31e42dfb45451c059bc56941c17974