Summary
Han Zheng discovered that Liblouis incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash. This issue was
addressed in Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2022-26981)
It was discovered that Liblouis incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a crash. (CVE-2022-31783)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | liblouis | 3.5.0-1ubuntu0.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | liblouis | 3.12.0-3ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | liblouis | 3.20.0-2ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by…
-
Unscored —
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.