CVE:CVE-2017-15101
CNNVD:CNNVD-201807-1917
Liblouis是一款使用C语言编写的开源的盲文翻译器。
liblouis 2.5.4之前版本中的‘findTable()’函数存在基于栈的缓冲区溢出漏洞。攻击者可利用该造成拒绝服务或执行任意代码。
solution:Upgrade liblouis liblouis to a higher version than 2.5.4,and avoid the version (,2.5.4); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0