CVE-2023-26768

2023-03-1600:00:00

ubuntu.com

cve-2023-26768

buffer overflow

liblouis

remote attacker

denial of service

compiletranslationtable.c

lou_setdatapath

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

54.5%

JSON

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote
attacker to cause a denial of service via the compileTranslationTable.c and
lou_setDataPath functions.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchliblouis< 3.5.0-1ubuntu0.5UNKNOWN
ubuntu20.04noarchliblouis< 3.12.0-3ubuntu0.2UNKNOWN
ubuntu22.04noarchliblouis< 3.20.0-2ubuntu0.2UNKNOWN
ubuntu22.10noarchliblouis< 3.22.0-2ubuntu0.1UNKNOWN
ubuntu23.04noarchliblouis< 3.24.0-1ubuntu0.1UNKNOWN
ubuntu16.04noarchliblouis< 2.6.4-2ubuntu0.4+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	liblouis	< 3.5.0-1ubuntu0.5	UNKNOWN
ubuntu	20.04	noarch	liblouis	< 3.12.0-3ubuntu0.2	UNKNOWN
ubuntu	22.04	noarch	liblouis	< 3.20.0-2ubuntu0.2	UNKNOWN
ubuntu	22.10	noarch	liblouis	< 3.22.0-2ubuntu0.1	UNKNOWN
ubuntu	23.04	noarch	liblouis	< 3.24.0-1ubuntu0.1	UNKNOWN
ubuntu	16.04	noarch	liblouis	< 2.6.4-2ubuntu0.4+esm1	UNKNOWN