PT-2017-13061 · Liblouis+4 · Liblouis+4

Publicado 2017-08-29 · Atualizado 2017-12-02 · CVE-2017-13740

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Liblouis version 3.2.0

Description A stack-based buffer overflow issue exists, triggered in the parseChars() function in compileTranslationTable.c. This can lead to denial of service or possibly other unspecified impacts.

Recommendations For Liblouis version 3.2.0, consider disabling the parseChars() function as a temporary workaround until a patch is available.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CESA-2017_3111

CVE-2017-13740

RHSA-2017:3111

RHSA-2017_3111

SUSE-SU-2017:2570-1

SUSE-SU-2017:2590-1

USN-3408-1

Produtos afetados

Centos

Liblouis

Red Hat

Suse

Ubuntu

Referências · 34

• https://osv.dev/vulnerability/SUSE-SU-2017:2570-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1056105 · Nota
• https://ubuntu.com/security/CVE-2017-13742 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-13744 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-13738 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20172570-1 · Nota
• https://suse.com/security/cve/CVE-2017-13739 · Nota
• https://bugzilla.suse.com/1056088 · Nota
• https://osv.dev/vulnerability/CVE-2017-13740 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-13740 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-13740 · Aviso do Fabricante
• https://bugzilla.suse.com/1056097 · Nota
• https://suse.com/support/update/announcement/2017/suse-su-20172590-1 · Nota
• https://osv.dev/vulnerability/USN-3408-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2017:2590-1 · Aviso do Fabricante