PT-2023-2375

CVE-2023-26768

·

Published

2023-02-04

·

Updated

2025-01-20

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Liblouis version 3.24.0
Description The issue is related to a buffer overflow that can be triggered by a remote attacker, potentially causing a denial of service. This is associated with the compileTranslationTable.c and the lou setDataPath functions. The vulnerability involves uncontrolled copying of data, which can lead to service disruption.
Recommendations For Liblouis version 3.24.0, consider disabling the lou setDataPath function and restricting access to the compileTranslationTable.c component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2023:6385
AZL-25653
INFSA-2023_6385
OPENSUSE-SU-2024:13498-1
RHSA-2023:6385
RHSA-2023_6385
SUSE-SU-2023:1824-1
SUSE-SU-2023:1828-1
SUSE-SU-2023_1828-1
SUSE-SU-2023:1829-1
SUSE-SU-2023_1829-1
SUSE-SU-2023:1854-1
SUSE-SU-2023_1854-1
USN-5996-1
USN-5996-2
Found an issue in the description? Have something to add? Feel free to write us 👾