CVE-2018-17937: Debian Linux

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Gpsd Project Gpsd: from 2.90, up to and including 3.17
• Microjson Project Microjson: from 1.0, up to and including 1.3

Published 2019-03-13. Last modified 2026-06-17.