CVE:CVE-2018-12085
CNNVD:CNNVD-201806-579
Liblouis是一款使用C语言编写的开源的盲文翻译器。
Liblouis 3.6.0版本中的compileTranslationTable.c文件中的‘parseChars’函数存在基于栈的缓冲区溢出漏洞。攻击者可利用该漏洞造成拒绝服务或执行任意代码。
solution:Upgrade liblouis liblouis to a higher version than 3.6.0,and avoid the version 3.6.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0