PatchTheCVEdiscount vulnerabilities and fixes
Recent CVEs affecting discount, with upgrade or downgrade steps. 4 tracked.
discount has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-15. Highest priority: CVE-2018-12495 (score 49/100).
- CVE-2018-12495 MEDIUM 5.5 DOWNGRADE MITIGATE The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a d
- CVE-2018-11504 MEDIUM 5.5 DOWNGRADE MITIGATE The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denia
- CVE-2018-11503 MEDIUM 5.5 DOWNGRADE MITIGATE The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a d
- CVE-2018-11468 MEDIUM 5.5 DOWNGRADE MITIGATE The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a
FAQ
How do I fix discount vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is discount being exploited right now?
None of the tracked discount CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which discount CVE should I patch first?
CVE-2018-12495 currently ranks highest (49/100): The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a d.