CVE catalog

CVE-2018-11364

r-cran-haven: CVE-2018-11364

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.14% · Oct 25, 2026

sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconv_open call.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianr-cran-havensid2.5.5-1fixed
Debianr-cran-havenforky2.5.5-1fixed
Debianr-cran-haventrixie2.5.4-1fixed
Debianr-cran-havenbookworm2.5.1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianr-cran-havensourcesid1.1.1-2lowNot reported[899335]
Debianr-cran-havensourceforky1.1.1-2lowNot reported[899335]
Debianr-cran-havensourcetrixie1.1.1-2lowNot reported[899335]
Debianr-cran-havensourcebookworm1.1.1-2lowNot reported[899335]

[Debian bug #899335]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [r-cran-haven]Fixed
    Details (2)

    • 2.5.1-1 · amd64 · bookworm

      Fixed · Fixed: 1.1.1-2

      dsa · r-cran-haven · debian · bookworm; dsa · r-cran-haven · debian · 12

    • 2.5.1-1 · arm64 · bookworm

      Fixed · Fixed: 1.1.1-2

      dsa · r-cran-haven · debian · bookworm; dsa · r-cran-haven · debian · 12

[Debian 13 (Trixie)]

  • [r-cran-haven]Fixed

    Source package: [r-cran-haven]

    Details (2)

    • 2.5.4-1 · amd64 · trixie

      Fixed · Fixed: 1.1.1-2

      dsa · r-cran-haven · debian · 13

    • 2.5.4-1+b1 · arm64 · trixie

      Fixed · Fixed: 1.1.1-2

      dsa · r-cran-haven · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]