A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade liblouis-utilsUpgrade liblouis-debuginfoUpgrade liblouis-pythonUpgrade liblouis-docUpgrade liblouisUpgrade liblouis-devel | Dec 7, 2017 | Nov 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade liblouisUpgrade liblouis-python | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade liblouis-pythonUpgrade liblouis | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade liblouis-pythonUpgrade liblouis-develUpgrade liblouis-docUpgrade liblouis-utilsUpgrade liblouis | Dec 6, 2017 | Nov 2, 2017 |
| Redhat_linux | — | Upgrade liblouisUpgrade liblouis-utilsUpgrade liblouis-develUpgrade liblouis-pythonUpgrade liblouis-docUpgrade liblouis-debuginfo | Dec 5, 2017 | Nov 24, 2017 |
| Suse | — | Upgrade liblouis0Upgrade liblouisUpgrade python-louis | Nov 24, 2017 | Nov 24, 2017 |
| Ubuntu | — | Upgrade liblouis | Nov 19, 2024 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub