CVE-2018-20349
N/A
Published: December 22, 2018 at 12:00 AM UTC
Updated: June 17, 2026 at 01:52 AM UTC
1 product affected across 1 vendorIgraph
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://github.com/igraph/igraph/issues/1141Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2019/12/msg00038.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NCGDUNQYLSZLSGN6JJBORVFW46U3A75Y/Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OWCGXEINKJM3JQUPVCSN4RBTRKWBTYI7/Quick Info
StatusMODIFIED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card