PT-2018-3474

CVE-2018-11684

·

Publicado

2018-06-02

·

Atualizado

2020-08-24

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Liblouis version 3.5.0
Description: The issue is related to a stack-based Buffer Overflow in the includeFile function. This can potentially allow a remote attacker to execute arbitrary code.
Recommendations: For Liblouis version 3.5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write
Identificadores relacionados
CVE-2018-11684
BDU:2020-01881
ALSA-2020:1708
CESA-2020_1708
OPENSUSE-SU-2018_2819-1
OPENSUSE-SU-2019:1160-1
OPENSUSE-SU-2019_1160-1
RHSA-2020:1708
RHSA-2020_1708
RLSA-2020:1708
SUSE-SU-2018:2569-1
SUSE-SU-2018:2780-1
SUSE-SU-2019:0795-1
USN-3672-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com