Summary
Henri Salo discovered that Liblouis incorrectly handled certain files.
An attacker could possibly use this to execute arbitrary code.
(CVE-2018-11683, CVE-2018-11684, CVE-2018-11685)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | liblouis | 2.5.3-2ubuntu1.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | liblouis | 2.6.4-2ubuntu0.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | liblouis | 3.5.0-1ubuntu0.2 |
Vulnerabilities 3
-
Unscored —
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different v…
-
Unscored —
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
-
Unscored —
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.