Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SciLinux: SLSA-2017-3111-1 Moderate: liblouis Security Flaws

Calendar Nov 02, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate arbitrary code liblouis SL7 translation tables
Multiple flaws were found in the processing of translation tables in liblouis. An attacker could crash or potentially execute arbitrary code using malicious translation tables. (CVE-2014-8184, CVE-2017-13738, CVE-2017-13740, CVE-2017-13741, CVE-2017-13742, CVE-2017-13743, CVE-2017-13744) SL7 x86_64 liblouis-2.5.2-11.el7_4.i686.rpm liblouis-2.5.2-11.el7_4.x86_64.rpm liblouis-debu [More...] 
Synopsis:          Moderate: liblouis security update
Advisory ID:       SLSA-2017:3111-1
Issue Date:        2017-11-02
CVE Numbers:       CVE-2017-13738
                   CVE-2017-13744
                   CVE-2017-13740
                   CVE-2017-13741
                   CVE-2017-13742
                   CVE-2017-13743
                   CVE-2014-8184
--

Security Fix(es):

* Multiple flaws were found in the processing of translation tables in
liblouis. An attacker could crash or potentially execute arbitrary code
using malicious translation tables. (CVE-2014-8184, CVE-2017-13738,
CVE-2017-13740, CVE-2017-13741, CVE-2017-13742, CVE-2017-13743,
CVE-2017-13744)
--

SL7
  x86_64
    liblouis-2.5.2-11.el7_4.i686.rpm
    liblouis-2.5.2-11.el7_4.x86_64.rpm
    liblouis-debuginfo-2.5.2-11.el7_4.i686.rpm
    liblouis-debuginfo-2.5.2-11.el7_4.x86_64.rpm
    liblouis-devel-2.5.2-11.el7_4.i686.rpm
    liblouis-devel-2.5.2-11.el7_4.x86_64.rpm
    liblouis-utils-2.5.2-11.el7_4.x86_64.rpm
  noarch
    liblouis-python-2.5.2-11.el7_4.noarch.rpm
    liblouis-doc-2.5.2-11.el7_4.noarch.rpm

- Scientific Linux Development Team