The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.01821·Published 2018-06-15·Will not fixCWE-125
The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.01459·Published 2018-05-26·Will not fixCWE-125
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.01544·Published 2018-05-26·Will not fixCWE-125
The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.01456·Published 2018-05-25·Will not fixCWE-125