CVE:CVE-2018-11684
CNNVD:CNNVD-201806-286
Liblouis是一款使用C语言编写的开源的盲文翻译器。
Liblouis 3.5.0版本中的compileTranslationTable.c文件的‘includeFile’函数存在基于栈的缓冲区溢出漏洞。攻击者可利用该漏洞执行任意代码或造成拒绝服务。
solution:Upgrade liblouis liblouis to a higher version than 3.5.0,and avoid the version 3.5.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0