PT-2023-2375

CVE-2023-26768

·

Publicado

2023-02-04

·

Atualizado

2025-01-20

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Liblouis version 3.24.0
Description The issue is related to a buffer overflow that can be triggered by a remote attacker, potentially causing a denial of service. This is associated with the compileTranslationTable.c and the lou setDataPath functions. The vulnerability involves uncontrolled copying of data, which can lead to service disruption.
Recommendations For Liblouis version 3.24.0, consider disabling the lou setDataPath function and restricting access to the compileTranslationTable.c component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALSA-2023:6385
AZL-25653
INFSA-2023_6385
OPENSUSE-SU-2024:13498-1
RHSA-2023:6385
RHSA-2023_6385
SUSE-SU-2023:1824-1
SUSE-SU-2023:1828-1
SUSE-SU-2023_1828-1
SUSE-SU-2023:1829-1
SUSE-SU-2023_1829-1
SUSE-SU-2023:1854-1
SUSE-SU-2023_1854-1
USN-5996-1
USN-5996-2
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾