CVE-2017-13740

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
liblouisliblouis
3.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
liblouis
bullseye
3.16.0-1
fixed
jessie
no-dsa
wheezy
not-affected
bookworm
3.24.0-1
fixed
sid
3.31.0-2
fixed
trixie
3.31.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
liblouis
zesty
Fixed 3.0.0-3ubuntu0.2
released
xenial
Fixed 2.6.4-2ubuntu0.1
released
trusty
dne
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/100607
https://access.redhat.com/errata/RHSA-2017:3111
https://bugzilla.redhat.com/show_bug.cgi?id=1484306
http://www.securityfocus.com/bid/100607
https://access.redhat.com/errata/RHSA-2017:3111
https://bugzilla.redhat.com/show_bug.cgi?id=1484306