A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade liblouis-docUpgrade liblouisUpgrade liblouis-develUpgrade liblouis-pythonUpgrade liblouis-debuginfoUpgrade liblouis-utils | Nov 6, 2017 | Nov 2, 2017 |
| Debian | — | Upgrade liblouis | Jul 30, 2024 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp1 | — | Upgrade liblouisUpgrade liblouis-python | Oct 11, 2019 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade liblouis-pythonUpgrade liblouis | Oct 11, 2019 | Aug 2, 2019 |
| Oracle_linux | — | Upgrade liblouis-utilsUpgrade liblouisUpgrade liblouis-develUpgrade liblouis-docUpgrade liblouis-python | Nov 3, 2017 | Oct 9, 2017 |
| Redhat_linux | — | Upgrade liblouisUpgrade liblouis-pythonUpgrade liblouis-debuginfoUpgrade liblouis-docUpgrade liblouis-utilsUpgrade liblouis-devel | Nov 2, 2017 | Nov 2, 2017 |
| Suse | — | Upgrade liblouis0Upgrade python-louisUpgrade liblouis | Nov 27, 2017 | Nov 2, 2017 |
| Ubuntu | — | Upgrade liblouis2Upgrade liblouis-bin | Nov 6, 2017 | Nov 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub