CVE-2018-17294

The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
liblouisliblouis
𝑥
< 3.7.0
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
opensuseleap
15.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
liblouis
bullseye
3.16.0-1
fixed
stretch
no-dsa
jessie
ignored
bookworm
3.24.0-1
fixed
sid
3.31.0-2
fixed
trixie
3.31.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
liblouis
bionic
Fixed 3.5.0-1ubuntu0.3
released
xenial
not-affected
trusty
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
http://www.securityfocus.com/bid/105511
https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396e
https://github.com/liblouis/liblouis/issues/635
https://usn.ubuntu.com/3782-1/
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
http://www.securityfocus.com/bid/105511
https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396e
https://github.com/liblouis/liblouis/issues/635
https://usn.ubuntu.com/3782-1/