PT-2023-2375
CVE-2023-26768
·
تاريخ النشر
2023-02-04
·
تاريخ التحديث
2025-01-20
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Liblouis version 3.24.0
Description
The issue is related to a buffer overflow that can be triggered by a remote attacker, potentially causing a denial of service. This is associated with the
compileTranslationTable.c and the lou setDataPath functions. The vulnerability involves uncontrolled copying of data, which can lead to service disruption.Recommendations
For Liblouis version 3.24.0, consider disabling the
lou setDataPath function and restricting access to the compileTranslationTable.c component until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾