Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SciLinux: SLSA-2017-3384-1 Moderate: Buffer Overflow in liblouis

Calendar Dec 05, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate severity dos attack stack overflow liblouis SL7
A missing fix for one stack-based buffer overflow in findTable() for CVE-2014-8184 was discovered. An attacker could cause denial of service or potentially allow arbitrary code execution. (CVE-2017-15101) SL7 x86_64 liblouis-2.5.2-12.el7_4.i686.rpm liblouis-2.5.2-12.el7_4.x86_64.rpm liblouis-debuginfo-2.5.2-12.el7_4.i686.rpm liblouis-debuginfo-2.5.2-12.el7_4.x86_64.rpm l [More...] 
Synopsis:          Moderate: liblouis security update
Advisory ID:       SLSA-2017:3384-1
Issue Date:        2017-12-05
CVE Numbers:       CVE-2017-15101
--

Security Fix(es):

* A missing fix for one stack-based buffer overflow in findTable() for
CVE-2014-8184 was discovered. An attacker could cause denial of service or
potentially allow arbitrary code execution. (CVE-2017-15101)
--

SL7
  x86_64
    liblouis-2.5.2-12.el7_4.i686.rpm
    liblouis-2.5.2-12.el7_4.x86_64.rpm
    liblouis-debuginfo-2.5.2-12.el7_4.i686.rpm
    liblouis-debuginfo-2.5.2-12.el7_4.x86_64.rpm
    liblouis-devel-2.5.2-12.el7_4.i686.rpm
    liblouis-devel-2.5.2-12.el7_4.x86_64.rpm
    liblouis-utils-2.5.2-12.el7_4.x86_64.rpm
  noarch
    liblouis-python-2.5.2-12.el7_4.noarch.rpm
    liblouis-doc-2.5.2-12.el7_4.noarch.rpm

- Scientific Linux Development Team