rpm package
suse/python-louis&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
pkg:rpm/suse/python-louis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4
Vulnerabilities (10)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2014-8184 | — | < 1.7.0-1.3.6.1 | 1.7.0-1.3.6.1 | Aug 2, 2019 | A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitr | ||
| CVE-2018-17294 | Med | 6.5 | < 1.7.0-1.3.16.1 | 1.7.0-1.3.16.1 | Sep 21, 2018 | The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionarie | |
| CVE-2017-15101 | Hig | 7.8 | < 1.7.0-1.3.6.1 | 1.7.0-1.3.6.1 | Jul 27, 2018 | A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution. | |
| CVE-2018-11685 | Hig | 8.8 | < 1.7.0-1.3.13.1 | 1.7.0-1.3.13.1 | Jun 4, 2018 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. | |
| CVE-2018-11684 | Hig | 8.8 | < 1.7.0-1.3.13.1 | 1.7.0-1.3.13.1 | Jun 4, 2018 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. | |
| CVE-2018-11683 | Hig | 8.8 | < 1.7.0-1.3.13.1 | 1.7.0-1.3.13.1 | Jun 4, 2018 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. | |
| CVE-2017-13743 | Med | 6.5 | < 1.7.0-1.3.3.1 | 1.7.0-1.3.3.1 | Aug 29, 2017 | There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack. | |
| CVE-2017-13741 | Med | 6.5 | < 1.7.0-1.3.3.1 | 1.7.0-1.3.3.1 | Aug 29, 2017 | There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack. | |
| CVE-2017-13740 | Hig | 8.8 | < 1.7.0-1.3.3.1 | 1.7.0-1.3.3.1 | Aug 29, 2017 | There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact. | |
| CVE-2017-13739 | Hig | 8.8 | < 1.7.0-1.3.3.1 | 1.7.0-1.3.3.1 | Aug 29, 2017 | There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution. |
- CVE-2014-8184Aug 2, 2019affected < 1.7.0-1.3.6.1fixed 1.7.0-1.3.6.1
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitr
- affected < 1.7.0-1.3.16.1fixed 1.7.0-1.3.16.1
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionarie
- affected < 1.7.0-1.3.6.1fixed 1.7.0-1.3.6.1
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.
- affected < 1.7.0-1.3.13.1fixed 1.7.0-1.3.13.1
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
- affected < 1.7.0-1.3.13.1fixed 1.7.0-1.3.13.1
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
- affected < 1.7.0-1.3.13.1fixed 1.7.0-1.3.13.1
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
- affected < 1.7.0-1.3.3.1fixed 1.7.0-1.3.3.1
There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
- affected < 1.7.0-1.3.3.1fixed 1.7.0-1.3.3.1
There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
- affected < 1.7.0-1.3.3.1fixed 1.7.0-1.3.3.1
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
- affected < 1.7.0-1.3.3.1fixed 1.7.0-1.3.3.1
There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution.