Liblouis Multiple Security Vulnerabilities

Bugtraq ID:	100607
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-13744 CVE-2017-13743 CVE-2017-13742 CVE-2017-13741 CVE-2017-13740 CVE-2017-13739 CVE-2017-13738
Remote:	Yes
Local:	No
Published:	Aug 29 2017 12:00AM
Updated:	Aug 29 2017 12:00AM
Credit:	OWL337
Vulnerable:	Liblouis Liblouis 3.2.0
Not Vulnerable:	Liblouis Liblouis 3.3.0

Liblouis Multiple Security Vulnerabilities

Liblouis is prone to multiple security vulnerabilities.

Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Liblouis 3.2.0 is affected; other versions may also be vulnerable.

Liblouis Multiple Security Vulnerabilities

References:

• Bug 1484297 - There is an illegal address access in compileTranslationTable.c of (Red Hat)
  
• Bug 1484299 - There is a heap overflow in liblouis which is triggered at functio (Red Hat)
  
• Bug 1484306 - There is a Stack-buffer-overflow in liblouis which is triggered in (Red Hat)
  
• Bug 1484332 - There is an use-after-free in function compileBrailleIndicator() o (Red Hat)
  
• Bug 1484334 - There is a heap overflow in liblouis which is triggered at functio (Red Hat)
  
• Bug 1484335 - There is a heap overflow in liblouis which is triggered at functio (Red Hat)
  
• Bug 1484338 - There is an illegal address access in function _lou_getALine() of (Red Hat)
  
• Liblouis Homepage (Liblouis)