CVE-2018-11684: Buffer Overflow

Published Jun 4, 2018

Updated

Last updated 25 August 2025

Other sources

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

— Launchpad

Affected Software

7 affected componentsFixes available

Liblouis Liblouis=3.5.0

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=17.10

Canonical Ubuntu Linux=18.04

openSUSE Leap=15.0

debian/liblouis

3.16.0-13.24.0-13.33.0-13.36.0-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/liblouis to a version that resolves this vulnerability.
Fixed in 3.16.0-1Fixed in 3.24.0-1Fixed in 3.33.0-1Fixed in 3.36.0-1

Event History

Jun 4, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Data Sourced

via NVD·06:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-11684?

CVE-2018-11684 is a vulnerability that exists in Liblouis 3.5.0 which allows for a stack-based buffer overflow.

How severe is CVE-2018-11684?

CVE-2018-11684 has a severity score of 8.8 (high).

What software is affected by CVE-2018-11684?

The Liblouis package in various versions of Debian and Ubuntu Linux are affected by CVE-2018-11684.

How can I fix CVE-2018-11684?

To fix CVE-2018-11684, you should update your Liblouis package to version 3.8.0-2 or higher.

Where can I find more information about CVE-2018-11684?

You can find more information about CVE-2018-11684 on the following references: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html, https://github.com/liblouis/liblouis/issues/592, https://usn.ubuntu.com/3672-1/