CVE-2022-31783: Medium severity Liblouis Liblouis vulnerability
Published May 27, 2022
·Updated
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by loutrace.
Affected Software
6 affected componentsFixes available
Liblouis Liblouis=3.21.0
Fedoraproject Fedora=36
debian/liblouis<3.22.0-1
3.22.0-1
debian/liblouis<3.22.0-1
3.22.0-1
debian/liblouis<3.22.0-1
3.22.0-1
debian/liblouis
3.24.0-13.33.0-13.39.0-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/liblouisto a version that resolves this vulnerability.Fixed in 3.24.0-1Fixed in 3.33.0-1Fixed in 3.39.0-1 - Upgrade
Upgrade
debian/liblouisto a version that resolves this vulnerability.Fixed in 3.22.0-1
Event History
May 27, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jun 2, 2022
Data Sourced
via OSV·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-31783.
2
What is the severity of CVE-2022-31783?
CVE-2022-31783 has a severity value of 5.5 (medium).
3
Which software versions are affected by CVE-2022-31783?
Liblouis version 3.21.0 and Fedora version 36 are affected by CVE-2022-31783.
4
What is the CWE ID of CVE-2022-31783?
The CWE ID of CVE-2022-31783 is CWE-787.
5
How can I fix CVE-2022-31783?
To fix CVE-2022-31783, update Liblouis to a version that includes the fix for the vulnerability.