Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-15856

Опубликовано: 12 мар. 2018
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8libxkbcommonNot affected
Red Hat Enterprise Linux 7gdmFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7libX11FixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7libxkbcommonFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7mesa-libGLwFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7xorg-x11-drv-atiFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7xorg-x11-drv-vesaFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7xorg-x11-drv-wacomFixedRHSA-2019:207906.08.2019
Red Hat Enterprise Linux 7xorg-x11-serverFixedRHSA-2019:207906.08.2019

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-835
https://bugzilla.redhat.com/show_bug.cgi?id=1623018libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash

EPSS

Процентиль: 13%
0.00044
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 7 лет назад

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

CVSS3: 5.5
nvd
больше 7 лет назад

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

CVSS3: 5.5
debian
больше 7 лет назад

An infinite loop when reaching EOL unexpectedly in compose/parser.c (a ...

CVSS3: 5.5
github
больше 3 лет назад

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

suse-cvrf
около 7 лет назад

Security update for libxkbcommon

EPSS

Процентиль: 13%
0.00044
Низкий

3.3 Low

CVSS3