rpm package
suse/liblouis&distro=SUSE Linux Enterprise Software Development Kit 12 SP5
pkg:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-26769 | — | < 2.6.4-6.14.2 | 2.6.4-6.14.2 | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c. | ||
| CVE-2023-26768 | — | < 2.6.4-6.14.2 | 2.6.4-6.14.2 | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions. | ||
| CVE-2023-26767 | — | < 2.6.4-6.14.2 | 2.6.4-6.14.2 | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint. | ||
| CVE-2018-17294 | Med | 6.5 | < 2.6.4-6.9.24 | 2.6.4-6.9.24 | Sep 21, 2018 | The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionarie |
- CVE-2023-26769Mar 16, 2023affected < 2.6.4-6.14.2fixed 2.6.4-6.14.2
Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.
- CVE-2023-26768Mar 16, 2023affected < 2.6.4-6.14.2fixed 2.6.4-6.14.2
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
- CVE-2023-26767Mar 16, 2023affected < 2.6.4-6.14.2fixed 2.6.4-6.14.2
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
- affected < 2.6.4-6.9.24fixed 2.6.4-6.9.24
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionarie