medium5.5
CVE-2018-15854
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a…
Impact
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xkbcommon Project | Xkbcommon | before 0.8.1 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2019:2079
- https://github.com/xkbcommon/libxkbcommon/commit/e3cacae7b1bfda0d839c280494f23284a1187adf
- https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
- https://security.gentoo.org/glsa/201810-05
- https://usn.ubuntu.com/3786-1/
- https://usn.ubuntu.com/3786-2/
- https://access.redhat.com/errata/RHSA-2019:2079
- https://github.com/xkbcommon/libxkbcommon/commit/e3cacae7b1bfda0d839c280494f23284a1187adf
- https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
- https://security.gentoo.org/glsa/201810-05
- https://usn.ubuntu.com/3786-1/
- https://usn.ubuntu.com/3786-2/