CVE-2017-15101

A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2018-07-27

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-121

Affected products

• Liblouis (Liblouis)
• Enterprise Linux Desktop (Redhat)
• Enterprise Linux Server (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server Eus (Redhat)
• Enterprise Linux Workstation (Redhat)

References

• https://access.redhat.com/errata/RHSA-2017:3384
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15101