CVE:CVE-2018-15856
CNNVD:CNNVD-201808-798
xkbcommon是一个键盘键映射编译器和支持库。
xkbcommon 0.8.1之前版本中的compose/parser.c文件存在无限循环漏洞。本地攻击者可借助特制的keymap文件利用该漏洞造成拒绝服务。
solution:Upgrade xkbcommon xkbcommon to a higher version than 0.8.1,and avoid the version (,0.8.1); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04