CVE-2018-11577 — Classic Buffer Overflow in Liblouis

CWE-120 — Classic Buffer OverflowCWE-400 — Uncontrolled Resource Consumption10 documents8 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 50.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LiblouisCanonical Ubuntu LinuxOpensuse Leap
Timeline
PublishedMay 31
Latest updateMay 13

Description

Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Debianliblouis/liblouis< 3.5.0-3+3
▶NVDopensuse/leap15.0

Also affects: Ubuntu Linux 14.04, 16.04, 17.10, 18.04

🔴Vulnerability Details

4
GHSA
GHSA-68vv-qv8v-cqjw: Liblouis 3↗2022-05-13
▶
OSV
liblouis vulnerabilities↗2018-06-04
▶
OSV
CVE-2018-11577: Liblouis 3↗2018-05-31
▶
CVEList
CVE-2018-11577: Liblouis 3↗2018-05-31
▶

📋Vendor Advisories

3
Ubuntu
Liblouis vulnerabilities↗2018-06-04
▶
Red Hat
liblouis: Segmentation fault in logging.c:lou_logPrint()↗2018-05-30
▶
Debian
CVE-2018-11577: liblouis - Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.↗2018
▶

💬Community

2
Bugzilla
CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()↗2018-06-05
▶
Bugzilla
CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint() [fedora-all]↗2018-06-05
▶
CVE-2018-11577 — Classic Buffer Overflow in Liblouis | cvebase