CVE-2018-15861
published 2018-08-25CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference)…
PriorityP417medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
EPSS
0.54%
42.4th percentile
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | libxkbcommon | < libxkbcommon 0.8.2-1 (bookworm) | libxkbcommon 0.8.2-1 (bookworm) |
| debian | x11-xkb-utils | < libxkbcommon 0.8.2-1 (bookworm) | libxkbcommon 0.8.2-1 (bookworm) |
| xkbcommon | libxkbcommon | <= 0.8.1 | — |
| xkbcommon | libxkbcommon | >= 0 < 0.8.2-1 | 0.8.2-1 |
| xkbcommon | libxkbcommon | >= 0 < 0.8.2-1 | 0.8.2-1 |
| xkbcommon | libxkbcommon | >= 0 < 0.8.2-1 | 0.8.2-1 |
| xkbcommon | libxkbcommon | >= 0 < 0.8.2-1 | 0.8.2-1 |
| xkbcommon | libxkbcommon | >= 0 < 0.4.1-0ubuntu1.1 | 0.4.1-0ubuntu1.1 |
| xkbcommon | libxkbcommon | >= 0 < 0.5.0-1ubuntu2.1 | 0.5.0-1ubuntu2.1 |
| xkbcommon | libxkbcommon | >= 0 < 0.8.0-1ubuntu0.1 | 0.8.0-1ubuntu0.1 |
| xkbcommon | xkbcommon | <= 0.8.1 | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libxkbcommon vulnerabilities
vendor_ubuntu·2018-11-06·CVSS 5.5
CVE-2018-15853 [MEDIUM] libxkbcommon vulnerabilities
Title: libxkbcommon vulnerabilities
Summary: Several security issues were fixed in libxkbcommon.
USN-3786-1 fixed several vulnerabilities in libxkbcommon. This
update provides the corresponding update for Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that libxkbcommon incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856,
CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861,
CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
libxkbcommon vulnerabilities
vendor_ubuntu·2018-10-08·CVSS 5.5
CVE-2018-15853 [MEDIUM] libxkbcommon vulnerabilities
Title: libxkbcommon vulnerabilities
Summary: Several security issues were fixed in libxkbcommon.
It was discovered that libxkbcommon incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856,
CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861,
CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2018-15861: libxkbcommon - Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon be...
vendor_debian·2018·CVSS 5.5
CVE-2018-15861 [MEDIUM] CVE-2018-15861: libxkbcommon - Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon be...
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
Scope: local
bookworm: resolved (fixed in 0.8.2-1)
bullseye: resolved (fixed in 0.8.2-1)
forky: resolved (fixed in 0.8.2-1)
sid: resolved (fixed in 0.8.2-1)
trixie: resolved (fixed in 0.8.2-1)
Red Hat
libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
vendor_redhat·2017-06-26·CVSS 5.5
CVE-2018-15861 [MEDIUM] CWE-476 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
Package: xkbcomp (Red Hat Enterprise Linux 10) - Fix deferred
Package: libxkbcommon (Red Hat Enterprise Linux 8) - Not affected
Package: xkbcomp (Red Hat Enterprise Linux 9) - Fix deferred
GHSA
GHSA-c3hw-xwc7-5xgw: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr
ghsa_unreviewed·2022-05-14
CVE-2018-15861 [MEDIUM] CWE-476 GHSA-c3hw-xwc7-5xgw: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
OSV
libxkbcommon vulnerabilities
osv·2018-11-06·CVSS 5.5
CVE-2018-15853 [MEDIUM] libxkbcommon vulnerabilities
libxkbcommon vulnerabilities
USN-3786-1 fixed several vulnerabilities in libxkbcommon. This
update provides the corresponding update for Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that libxkbcommon incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856,
CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861,
CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
OSV
libxkbcommon vulnerabilities
osv·2018-10-08·CVSS 5.5
CVE-2018-15853 [MEDIUM] libxkbcommon vulnerabilities
libxkbcommon vulnerabilities
It was discovered that libxkbcommon incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856,
CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861,
CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
OSV
CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr
osv·2018-08-25·CVSS 5.5
CVE-2018-15861 [MEDIUM] CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-15861 xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash [fedora-42]
bugzilla·2025-12-01·CVSS 5.5
CVE-2018-15861 [MEDIUM] CVE-2018-15861 xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash [fedora-42]
CVE-2018-15861 xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to cl
Bugzilla
CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
bugzilla·2018-08-28·CVSS 5.5
CVE-2018-15861 [MEDIUM] CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
CVE-2018-15861 libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
Upstream patch:
https://github.com/xkbcommon/libxkbcommon/commit/38e1766bc6e20108948aec8a0b222a4bad0254e9
References:
https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2019:2079 https://access.redhat.com/errata/RHSA-2019:2079
---
This bug is now closed. Further updates for individual products wil
https://access.redhat.com/errata/RHSA-2019:2079https://github.com/xkbcommon/libxkbcommon/commit/38e1766bc6e20108948aec8a0b222a4bad0254e9https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.htmlhttps://security.gentoo.org/glsa/201810-05https://usn.ubuntu.com/3786-1/https://usn.ubuntu.com/3786-2/https://access.redhat.com/errata/RHSA-2019:2079https://github.com/xkbcommon/libxkbcommon/commit/38e1766bc6e20108948aec8a0b222a4bad0254e9https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.htmlhttps://security.gentoo.org/glsa/201810-05https://usn.ubuntu.com/3786-1/https://usn.ubuntu.com/3786-2/
2018-08-25
Published