Red Hat Security Advisory

RHSA-2020:1708

liblouis security and bug fix update

Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) liblouis-2.6.2-21.el8, python3-louis-2.6.2-21.el8

Fixes 4 records

TI-2018-08283 CVE-2018-11577 · GHSA-68vv-qv8v-cqjw

Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

MEDIUM 43

Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02536 Published 2018-05-31 Partial fix CWE-120

TI-2018-08665 CVE-2018-12085 · GHSA-m5x4-j853-x7hc

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in…

MEDIUM 42

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02196 Published 2018-06-09 Fixed CWE-787

TI-2018-08352 CVE-2018-11685 · GHSA-jcjp-8pj4-g7wf

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

MEDIUM 42

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02196 Published 2018-06-04 Partial fix CWE-787

TI-2018-08351 CVE-2018-11684 · GHSA-6fmc-x2cx-6342

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

MEDIUM 42

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02196 Published 2018-06-04 Fixed CWE-787