Back to Database
Status published
Medium
CVE-2018-17294
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7...
Vulnerability Description
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17294
Credits & Attribution
No credits recorded in the NVD database.
References
More from liblouis
View All →CVE-2022-31783
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c,...
Medium
5.5
CVE-2022-26981
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in...
High
7.8
CVE-2018-12085
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function...
High
8.8
CVE-2018-11685
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function...
High
8.8
CVE-2018-11684
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function...
High
8.8
Affected Vendor
liblouis
View all reports →Affected Software
liblouis, ubuntu linux, leap
Vulnerable Versions:
0, 14.04, 16.04, 18.04, 15.0
Timeline
Official Publish:
September 21st, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.