A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade liblouis-docUpgrade liblouisUpgrade liblouis-develUpgrade liblouis-debuginfoUpgrade liblouis-pythonUpgrade liblouis-utils | Nov 6, 2017 | Nov 2, 2017 |
| Debian | — | Upgrade liblouis | Jul 30, 2024 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp1 | — | Upgrade liblouisUpgrade liblouis-python | Oct 11, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade liblouisUpgrade liblouis-python | Oct 11, 2019 | Aug 2, 2019 |
| Oracle_linux | — | Upgrade liblouisUpgrade liblouis-docUpgrade liblouis-develUpgrade liblouis-utilsUpgrade liblouis-python | Nov 3, 2017 | Oct 9, 2017 |
| Redhat_linux | — | Upgrade liblouis-pythonUpgrade liblouisUpgrade liblouis-debuginfoUpgrade liblouis-docUpgrade liblouis-utilsUpgrade liblouis-devel | Nov 2, 2017 | Nov 2, 2017 |
| Suse | — | Upgrade liblouisUpgrade python-louisUpgrade liblouis0 | Nov 27, 2017 | Nov 2, 2017 |
| Ubuntu | — | Upgrade liblouis2Upgrade liblouis-bin | Nov 6, 2017 | Nov 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub