python-louis (SUSE:Linux Enterprise Server for SAP Applications 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 11 SP4 package python-louis, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2017-13739 — CVSS 8.8 (high): There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the…
• CVE-2018-11683 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than…
• CVE-2017-13740 — CVSS 8.8 (high): There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will…
• CVE-2018-11685 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
• CVE-2018-11684 — CVSS 8.8 (high): Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
• CVE-2014-8184 — CVSS 7.8 (high): A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An…
• CVE-2017-15101 — CVSS 7.8 (high): A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could…
• CVE-2017-13743 — CVSS 6.5 (medium): There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of…
• CVE-2017-13741 — CVSS 6.5 (medium): There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a…
• CVE-2018-17294 — CVSS 6.5 (medium): The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing…