Summary
Henri Salo discovered that Liblouis incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-12085)
It was discovered that Liblouis incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 18.04 LTS. (CVE-2018-17294)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | liblouis | 2.5.3-2ubuntu1.5 |
| Ubuntu · 16.04 LTS 16.04:LTS | liblouis | 2.6.4-2ubuntu0.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | liblouis | 3.5.0-1ubuntu0.3 |
Vulnerabilities 2
-
Unscored —
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different v…
-
Unscored —
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's …