REDHAT-BUG-1488938: Use After Free

Published Sep 6, 2017

Updated

There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a denial of service attack.

Product bug:

https://bugzilla.redhat.com/showbug.cgi?id=1484332

Affected Software

1 affected component

Liblouis Liblouis

Event History

Sep 6, 2017

Data Sourced

via Red Hat·01:36 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1488938?

The severity of REDHAT-BUG-1488938 is categorized as high due to its potential for causing denial of service.

How do I fix REDHAT-BUG-1488938?

To fix REDHAT-BUG-1488938, upgrade to a patched version of Liblouis that addresses the use-after-free vulnerability.

What systems are affected by REDHAT-BUG-1488938?

REDHAT-BUG-1488938 affects versions of Liblouis 3.2.0 that are vulnerable to the identified use-after-free issue.

Is there a workaround for REDHAT-BUG-1488938?

Currently, there are no recommended workarounds for REDHAT-BUG-1488938; upgrading is the best approach.

What should I do if I cannot upgrade for REDHAT-BUG-1488938?

If you cannot upgrade due to constraints, monitor your systems closely for unusual activity and consider isolating affected installations.