CVE-2018-17294

The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.

Published: Sep 21, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-17294
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

CWE-125

Affected Software
References

Software	From	Fixed in
liblouis / liblouis	-	3.7.0
canonical / ubuntu_linux	16.04	16.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	18.04	18.04.x
opensuse / leap	15.0	15.0.x

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
http://www.securityfocus.com/bid/105511
https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396e
https://github.com/liblouis/liblouis/issues/635
https://usn.ubuntu.com/3782-1/

Vulnerability Database

CVE-2018-17294

Deep Security Visibility Without the Complexity