PT-2023-2375

CVE-2023-26768

·

تاريخ النشر

2023-02-04

·

تاريخ التحديث

2025-01-20

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Liblouis version 3.24.0
Description The issue is related to a buffer overflow that can be triggered by a remote attacker, potentially causing a denial of service. This is associated with the compileTranslationTable.c and the lou setDataPath functions. The vulnerability involves uncontrolled copying of data, which can lead to service disruption.
Recommendations For Liblouis version 3.24.0, consider disabling the lou setDataPath function and restricting access to the compileTranslationTable.c component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2023:6385
AZL-25653
INFSA-2023_6385
OPENSUSE-SU-2024:13498-1
RHSA-2023:6385
RHSA-2023_6385
SUSE-SU-2023:1824-1
SUSE-SU-2023:1828-1
SUSE-SU-2023_1828-1
SUSE-SU-2023:1829-1
SUSE-SU-2023_1829-1
SUSE-SU-2023:1854-1
SUSE-SU-2023_1854-1
USN-5996-1
USN-5996-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾