CVE-2018-11440: Buffer Overflow

Reference Links

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html
• http://www.securityfocus.com/bid/104321
• https://github.com/liblouis/liblouis/issues/575
• https://usn.ubuntu.com/3669-1/
• https://launchpad.net/bugs/cve/CVE-2018-11440
• https://github.com/liblouis/liblouis/commit/4417bad83df4481ed58419b28c5c91b9649e2a86
• https://security-tracker.debian.org/tracker/CVE-2018-11440
• https://ubuntu.com/security/notices/USN-3669-1
• https://www.cve.org/CVERecord?id=CVE-2018-11440
• https://nvd.nist.gov/vuln/detail/CVE-2018-11440
• https://ubuntu.com/security/CVE-2018-11440

Parent vulnerabilities

(Appears in the following advisories)

• USN-3669-1

Frequently Asked Questions

• What is CVE-2018-11440?

  CVE-2018-11440 is a vulnerability in Liblouis 3.5.0 that allows for a stack-based buffer overflow.

• How severe is CVE-2018-11440?

  CVE-2018-11440 has a severity rating of 8.8, which is classified as high.

• What is the affected software?

  The affected software includes Liblouis versions 3.5.0, 3.8.0-2, 3.16.0-1, 3.24.0-1, and 3.27.0-1 on Debian, as well as various versions on Ubuntu and openSUSE Leap.

• How do I fix CVE-2018-11440?

  To fix CVE-2018-11440, you should update Liblouis to version 3.8.0-2 or later on Debian, and apply the appropriate remedies on other affected software.

• Where can I find more information about CVE-2018-11440?

  You can find more information about CVE-2018-11440 at the following references: [1](http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html), [2](http://www.securityfocus.com/bid/104321), [3](https://github.com/liblouis/liblouis/issues/575)