CVE catalog
CVE-2018-10992
lilypond: CVE-2018-10992
- Severity
- Critical · CVSS 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.46% · Oct 27, 2026
lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument, because the GNU Guile code uses the system Scheme procedure instead of the system* Scheme procedure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-17523.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | lilypond | sid | 2.24.4-6 | fixed |
| Debian | lilypond | forky | 2.24.4-6 | fixed |
| Debian | lilypond | trixie | 2.24.4-5 | fixed |
| Debian | lilypond | bookworm | 2.24.1-2 | fixed |
| Opensuse | lilypond | tumbleweed | 2.23.3-1.3 | fixed |
| Ubuntu | lilypond | 18.04 | 2.18.2-9 | vulnerable |
| Ubuntu | lilypond | 18.04 | 2.18.2-11 | vulnerable |
| Ubuntu | lilypond | 18.04 | 2.18.2-12 | vulnerable |
| Ubuntu | lilypond | 18.04 | 2.18.2-12build1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | lilypond | source | sid | 2.18.2-13 | not yet assigned | Not reported | [898373] |
| Debian | lilypond | source | forky | 2.18.2-13 | not yet assigned | Not reported | [898373] |
| Debian | lilypond | source | trixie | 2.18.2-13 | not yet assigned | Not reported | [898373] |
| Debian | lilypond | source | bookworm | 2.18.2-13 | not yet assigned | Not reported | [898373] |
| Opensuse | lilypond | rpm | tumbleweed | 2.23.3-1.3 | Not reported | OPENSUSE-SU-2024:11021-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [lilypond-doc]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-cs]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-de]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-es]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-fr]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-hu]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-it]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-ja]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-nl]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-doc-zh]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-emmentaler-fonts]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
- [lilypond-fonts-common]Unknown
Source package: [lilypond]
Details (1)
2.24.4-1.11· noarch · tumbleweedUnknown · Fixed:
2.23.3-1.3Version impact unknown
dsa · lilypond · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [lilypond]Fixed
Details (4)
2.24.1-2· amd64 · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· arm64 · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-data]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc-html]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc-html-ca]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc-html-cs]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc-html-de]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
- [lilypond-doc-html-es]Fixed
Source package: [lilypond]
Details (4)
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.1-2· all · bookwormFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
2.24.4-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
2.18.2-13dsa · lilypond · debian · bookworm; dsa · lilypond · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11021-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2018-10992]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2018-10992]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11021-1]
- [https://security-tracker.debian.org/tracker/CVE-2018-10992]
- [https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-10992.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]