liblouis (SUSE:Linux Enterprise Module for Desktop Applications 15) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 package liblouis, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2018-11410 — CVSS 9.8 (critical): An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers…
• CVE-2018-11440 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
• CVE-2018-11577 — CVSS 8.8 (high): Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.
• CVE-2018-11683 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than…
• CVE-2018-11684 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
• CVE-2018-11685 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
• CVE-2018-12085 — CVSS 8.8 (high): Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than…
• CVE-2018-17294 — CVSS 6.5 (medium): The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing…