Summary
USN-3786-1 fixed several vulnerabilities in libxkbcommon. This
update provides the corresponding update for Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that libxkbcommon incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856,
CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861,
CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libxkbcommon | 0.8.0-1ubuntu0.1 |
Vulnerabilities 11
-
Unscored —
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local att…
-
Unscored —
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…
-
Unscored —
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…
-
Unscored —
An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 c…
-
Unscored —
An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local at…
-
Unscored —
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon…
-
Unscored —
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 c…
-
Unscored —
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attac…
-
Unscored —
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attack…
-
Unscored —
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by…
-
Unscored —
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local att…
References
-
report
https://ubuntu.com/security/CVE-2018-15853
-
report
https://ubuntu.com/security/CVE-2018-15854
-
report
https://ubuntu.com/security/CVE-2018-15855
-
report
https://ubuntu.com/security/CVE-2018-15856
-
report
https://ubuntu.com/security/CVE-2018-15857
-
report
https://ubuntu.com/security/CVE-2018-15858
-
report
https://ubuntu.com/security/CVE-2018-15859
-
report
https://ubuntu.com/security/CVE-2018-15861
-
report
https://ubuntu.com/security/CVE-2018-15862
-
report
https://ubuntu.com/security/CVE-2018-15863
-
report
https://ubuntu.com/security/CVE-2018-15864