A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-liblouiscentos-upgrade-liblouis-debuginfocentos-upgrade-liblouis-develcentos-upgrade-liblouis-doccentos-upgrade-liblouis-pythoncentos-upgrade-liblouis-utils | Nov 6, 2017 | Nov 2, 2017 |
| Debian | debian-upgrade-liblouis | Jul 30, 2024 | Aug 2, 2019 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-liblouishuawei-euleros-2_0_sp1-upgrade-liblouis-python | Oct 11, 2019 | Aug 2, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-liblouishuawei-euleros-2_0_sp2-upgrade-liblouis-python | Oct 11, 2019 | Aug 2, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-liblouisoracle-linux-upgrade-liblouis-develoracle-linux-upgrade-liblouis-docoracle-linux-upgrade-liblouis-pythonoracle-linux-upgrade-liblouis-utils | Nov 3, 2017 | Oct 9, 2017 |
| Redhat_linux | — | redhat-upgrade-liblouisredhat-upgrade-liblouis-debuginforedhat-upgrade-liblouis-develredhat-upgrade-liblouis-docredhat-upgrade-liblouis-pythonredhat-upgrade-liblouis-utils | Nov 2, 2017 | Nov 2, 2017 |
| Suse | — | suse-upgrade-liblouissuse-upgrade-liblouis0suse-upgrade-python-louis | Nov 27, 2017 | Nov 2, 2017 |
| Ubuntu | ubuntu-upgrade-liblouis-binubuntu-upgrade-liblouis2 | Nov 6, 2017 | Nov 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub