Priority HIGH 72
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01356 · Published 2023-03-16 · Partial fix CWE-120
Priority MEDIUM 50
An issue was discovered in Liblouis 3.5.0.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04777 · Published 2018-05-24 · Fix deferred CWE-416
Priority MEDIUM 45
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01517 · Published 2018-07-27 · Fixed CWE-121
Priority MEDIUM 44
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03023 · Published 2018-05-25 · Fix deferred CWE-787
Priority MEDIUM 43
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02536 · Published 2018-05-31 · Partial fix CWE-120
Priority MEDIUM 42
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01356 · Published 2023-03-16 · Partial fix CWE-120
Priority MEDIUM 42
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02196 · Published 2018-06-09 · Fixed CWE-787
Priority MEDIUM 42
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02196 · Published 2018-06-04 · Partial fix CWE-787
Priority MEDIUM 42
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02196 · Published 2018-06-04 · Fixed CWE-787
Priority MEDIUM 42
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0211 · Published 2018-06-04 · No fix listed CWE-787
Priority MEDIUM 42
There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02189 · Published 2017-08-29 · No fix listed CWE-119
Priority MEDIUM 41
Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01157 · Published 2023-03-16 · Partial fix CWE-120
Priority MEDIUM 41
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01594 · Published 2017-08-29 · Fixed CWE-119
Priority MEDIUM 41
There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01505 · Published 2017-08-29 · Fixed CWE-125
Priority LOW 37
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01451 · Published 2022-03-13 · Fix deferred CWE-120
Priority LOW 37
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01549 · Published 2019-08-02 · Fixed in 2.5.4 CWE-121
Priority LOW 34
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02716 · Published 2018-09-21 · Fix deferred CWE-125
Priority LOW 33
There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01845 · Published 2017-08-29 · Fixed CWE-119
Priority LOW 33
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01845 · Published 2017-08-29 · Fixed CWE-119
Priority LOW 32
There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01357 · Published 2017-08-29 · Fixed CWE-125
Priority LOW 32
There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01756 · Published 2017-08-29 · Fixed CWE-416
Priority LOW 27
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01131 · Published 2022-05-27 · Will not fix CWE-787