PT-2018-3474

CVE-2018-11684

·

Published

2018-06-02

·

Updated

2020-08-24

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Liblouis version 3.5.0
Description: The issue is related to a stack-based Buffer Overflow in the includeFile function. This can potentially allow a remote attacker to execute arbitrary code.
Recommendations: For Liblouis version 3.5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2018-11684
BDU:2020-01881
ALSA-2020:1708
CESA-2020_1708
OPENSUSE-SU-2018_2819-1
OPENSUSE-SU-2019:1160-1
OPENSUSE-SU-2019_1160-1
RHSA-2020:1708
RHSA-2020_1708
RLSA-2020:1708
SUSE-SU-2018:2569-1
SUSE-SU-2018:2780-1
SUSE-SU-2019:0795-1
USN-3672-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com