Oval Definition:oval:com.ubuntu.bionic:def:201817294000
Revision Date:2018-09-21Version:1
Title:CVE-2018-17294 on Ubuntu 18.04 LTS (bionic) - medium.
Description:The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-17294
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND The 'liblouis' package in bionic was vulnerable but has been fixed (note: '3.5.0-1ubuntu0.3').
  • BACK