{"action":"Upgrade udisks2 to 2.8.1-1 or later.","affected":[{"fixed":"2.8.1-1","introduced":"0"}],"component":"udisks2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2.8.1-1"],"id":"tcs_01M5ND5YSA83QVV7T5F9066PHA","modified_at":"2026-10-23T18:03:01.733634912Z","published_at":"2018-09-22T16:29:00.947Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-17336","https://security-tracker.debian.org/tracker/CVE-2018-17336"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-17336#Debian:13/udisks2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-17336"}],"summary":"UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or"}