CVE catalog

CVE-2018-18751

gettext: CVE-2018-18751

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
4.26% · Oct 25, 2026

An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangettextsid1.0-5fixed
Debiangettextforky1.0-5fixed
Debiangettexttrixie0.23.1-2fixed
Debiangettextbookworm0.21-12fixed
Alpinegettext3.110.20.1-r0fixed
Alpinegettext3.120.20.1-r0fixed
Alpinegettext3.130.20.1-r0fixed
Alpinegettext3.140.20.1-r0fixed
Alpinegettext3.150.20.1-r0fixed
Alpinegettext3.160.20.1-r0fixed
Alpinegettext3.170.20.1-r0fixed
Alpinegettext3.180.20.1-r0fixed
Alpinegettext3.190.20.1-r0fixed
Alpinegettext3.200.20.1-r0fixed
Alpinegettext3.210.20.1-r0fixed
Alpinegettext3.220.20.1-r0fixed
Alpinegettext3.230.20.1-r0fixed
Alpinegettext3.240.20.1-r0fixed
Ubuntugettext14.040.18.1.1-10ubuntu3vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu1vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu2vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu3vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu3.1fixed
Ubuntugettext16.040.19.4-1ubuntu3vulnerable
Ubuntugettext16.040.19.6-1ubuntu1vulnerable
Ubuntugettext16.040.19.7-2ubuntu2vulnerable
Ubuntugettext16.040.19.7-2ubuntu3vulnerable
Ubuntugettext16.040.19.7-2ubuntu3.1fixed
Ubuntugettext18.040.19.8.1-4ubuntu1vulnerable
Ubuntugettext18.040.19.8.1-4ubuntu2vulnerable
Ubuntugettext18.040.19.8.1-4ubuntu4vulnerable
Ubuntugettext18.040.19.8.1-6vulnerable
Ubuntugettext18.040.19.8.1-6ubuntu0.1fixed
Ubuntugettext14.040.18.1.1-10ubuntu3vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu1vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu2vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu3vulnerable
Ubuntugettext14.040.18.3.1-1ubuntu3.1fixed
Ubuntugettext16.040.19.4-1ubuntu3vulnerable
Ubuntugettext16.040.19.6-1ubuntu1vulnerable
Ubuntugettext16.040.19.7-2ubuntu2vulnerable
Ubuntugettext16.040.19.7-2ubuntu3vulnerable
Ubuntugettext16.040.19.7-2ubuntu3.1fixed
Ubuntugettext18.040.19.8.1-4ubuntu1vulnerable
Ubuntugettext18.040.19.8.1-4ubuntu2vulnerable
Ubuntugettext18.040.19.8.1-4ubuntu4vulnerable
Ubuntugettext18.040.19.8.1-6vulnerable
Ubuntugettext18.040.19.8.1-6ubuntu0.1fixed
Susegettext-runtimelinux enterprise module for basesystem 15 sp10.19.8.1-4.8.1fixed
Susegettext-runtimelinux enterprise module for basesystem 15 sp20.19.8.1-4.8.1fixed
Opensusegettext-csharpleap 15.20.19.8.1-lp152.6.3.1fixed
Opensusegettext-javaleap 15.20.19.8.1-lp152.6.3.1fixed
Opensusegettext-runtimeleap 15.20.19.8.1-lp152.6.3.1fixed
Opensusegettext-runtime-minileap 15.20.19.8.1-lp152.6.3.1fixed
Susegettext-csharppackage hub 15 sp10.19.8.1-bp151.2.1fixed
Opensusegettext-csharpleap 15.10.19.8.1-lp151.5.3.1fixed
Opensusegettext-javaleap 15.10.19.8.1-lp151.5.3.1fixed
Opensusegettext-runtimeleap 15.10.19.8.1-lp151.5.3.1fixed
Opensusegettext-runtime-minileap 15.10.19.8.1-lp151.5.3.1fixed
Susegettext-runtimelinux enterprise server 12 sp50.19.2-3.3.6fixed
Susegettext-runtimelinux enterprise server for sap applications 12 sp50.19.2-3.3.6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangettextsourcesid0.19.8.1-9unimportantNot reported[913173]
Debiangettextsourceforky0.19.8.1-9unimportantNot reported[913173]
Debiangettextsourcetrixie0.19.8.1-9unimportantNot reported[913173]
Debiangettextsourcebookworm0.19.8.1-9unimportantNot reported[913173]
Alpinegettextapk3.110.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.120.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.130.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.140.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.150.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.160.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.170.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.180.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.190.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.200.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.210.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.220.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.230.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Alpinegettextapk3.240.20.1-r0Not reportedALPINE-CVE-2018-18751Not reported
Ubuntugettextdeb14.040.18.3.1-1ubuntu3.1Not reportedUBUNTU-CVE-2018-18751Not reported
Ubuntugettextdeb16.040.19.7-2ubuntu3.1Not reportedUBUNTU-CVE-2018-18751Not reported
Ubuntugettextdeb18.040.19.8.1-6ubuntu0.1Not reportedUBUNTU-CVE-2018-18751Not reported
Ubuntugettextdeb14.040.18.3.1-1ubuntu3.1Not reportedUSN-3815-1Not reported
Ubuntugettextdeb16.040.19.7-2ubuntu3.1Not reportedUSN-3815-1Not reported
Ubuntugettextdeb18.040.19.8.1-6ubuntu0.1Not reportedUSN-3815-1Not reported
Susegettext-runtimerpmlinux enterprise module for basesystem 15 sp10.19.8.1-4.8.1Not reportedSUSE-SU-2020:2296-1Not reported
Susegettext-runtimerpmlinux enterprise module for basesystem 15 sp20.19.8.1-4.8.1Not reportedSUSE-SU-2020:2296-1Not reported
Opensusegettext-csharprpmleap 15.20.19.8.1-lp152.6.3.1Not reportedOPENSUSE-SU-2020:1278-1Not reported
Opensusegettext-javarpmleap 15.20.19.8.1-lp152.6.3.1Not reportedOPENSUSE-SU-2020:1278-1Not reported
Opensusegettext-runtimerpmleap 15.20.19.8.1-lp152.6.3.1Not reportedOPENSUSE-SU-2020:1278-1Not reported
Opensusegettext-runtime-minirpmleap 15.20.19.8.1-lp152.6.3.1Not reportedOPENSUSE-SU-2020:1278-1Not reported
Susegettext-csharprpmpackage hub 15 sp10.19.8.1-bp151.2.1Not reportedOPENSUSE-SU-2020:1385-1Not reported
Opensusegettext-csharprpmleap 15.10.19.8.1-lp151.5.3.1Not reportedOPENSUSE-SU-2020:1270-1Not reported
Opensusegettext-javarpmleap 15.10.19.8.1-lp151.5.3.1Not reportedOPENSUSE-SU-2020:1270-1Not reported
Opensusegettext-runtimerpmleap 15.10.19.8.1-lp151.5.3.1Not reportedOPENSUSE-SU-2020:1270-1Not reported
Opensusegettext-runtime-minirpmleap 15.10.19.8.1-lp151.5.3.1Not reportedOPENSUSE-SU-2020:1270-1Not reported
Susegettext-runtimerpmlinux enterprise server 12 sp50.19.2-3.3.6Not reportedSUSE-SU-2021:4060-1Not reported
Susegettext-runtimerpmlinux enterprise server for sap applications 12 sp50.19.2-3.3.6Not reportedSUSE-SU-2021:4060-1Not reported

[Debian bug #913173]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [autopoint]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [gettext]Fixed
    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [gettext-base]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [gettext-doc]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [gettext-el]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · all · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [libasprintf0v5]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [libasprintf-dev]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [libgettextpo0]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

  • [libgettextpo-dev]Fixed

    Source package: [gettext]

    Details (2)

    • 0.21-12 · amd64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

    • 0.21-12 · arm64 · bookworm

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · bookworm; dsa · gettext · debian · 12

[Debian 13 (Trixie)]

  • [autopoint]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [gettext]Fixed
    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [gettext-base]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [gettext-doc]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [gettext-el]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · all · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [libasprintf0v5]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [libasprintf-dev]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [libgettextpo0]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

  • [libgettextpo-dev]Fixed

    Source package: [gettext]

    Details (2)

    • 0.23.1-2 · amd64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

    • 0.23.1-2 · arm64 · trixie

      Fixed · Fixed: 0.19.8.1-9

      dsa · gettext · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]