CVE-2018-17294
21.09.2018, 07:29
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| liblouis | liblouis | 𝑥 < 3.7.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| opensuse | leap | 15.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| liblouis-data |
| ||||||||||||||||||
| liblouis-devel |
| ||||||||||||||||||
| liblouis14 |
| ||||||||||||||||||
| liblouis9 |
| ||||||||||||||||||
| python-louis |
| ||||||||||||||||||
| python3-louis |
|
Common Weakness Enumeration
References