CVE-2018-12085: Buffer Overflow

Published Jun 9, 2018

Updated

Last updated 25 August 2025

Other sources

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

— Launchpad

Affected Software

6 affected componentsFixes available

Liblouis Liblouis=3.6.0

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

openSUSE Leap=15.0

debian/liblouis

3.16.0-13.24.0-13.33.0-13.36.0-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/liblouis to a version that resolves this vulnerability.
Fixed in 3.16.0-1Fixed in 3.24.0-1Fixed in 3.33.0-1Fixed in 3.36.0-1

Event History

Jun 9, 2018

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

via NVD·11:29 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-12085?

CVE-2018-12085 is a stack-based buffer overflow vulnerability in Liblouis 3.6.0.

What is the severity of CVE-2018-12085?

The severity of CVE-2018-12085 is high (8.8).

How does CVE-2018-12085 affect Liblouis?

CVE-2018-12085 affects Liblouis version 3.6.0.

How can I fix CVE-2018-12085?

To fix CVE-2018-12085, upgrade to Liblouis version 3.8.0-2, 3.16.0-1, 3.24.0-1, or 3.27.0-1.

Are there any additional references for CVE-2018-12085?

Yes, you can find additional references for CVE-2018-12085 at the following URLs: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html, https://github.com/liblouis/liblouis/issues/595, and https://usn.ubuntu.com/3782-1/