CVE-2018-11410

moderate-risk
Published 2018-05-24

An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Do I need to act?

-
0.80% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (5)

Affected Vendors

Canonical Liblouis

References (10)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
Third Party Advisory http://www.securityfocus.com/bid/104324
Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1582024
Third Party Advisory https://docs.google.com/document/d/1Uw3D6ECXZr8S2cWOTY81kg6ivv0WpR4kQqxVpUSyGUA/...
Third Party Advisory https://usn.ubuntu.com/3669-1/
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
Third Party Advisory http://www.securityfocus.com/bid/104324
Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1582024
Third Party Advisory https://docs.google.com/document/d/1Uw3D6ECXZr8S2cWOTY81kg6ivv0WpR4kQqxVpUSyGUA/...
Third Party Advisory https://usn.ubuntu.com/3669-1/
47
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 3/34 · Minimal
Exposure 12/34 · Low