CVE-2017-13742

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile()...

6.5 MediumFix available

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.85%Up 0.5 points since Apr 14, 2021

What each source reports

NVD Score used 6.5

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: CVE-2017-13742
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: CVE-2017-13742
Updated: 2026-11-02

EUVDEUVD-2017-5259 No score

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: EUVD-2017-5259
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vfmv-mrqv-497v 6.5

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile()...

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: GHSA-vfmv-mrqv-497v
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 6.5

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: CVE-2017-13742
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2017-13742 6.5

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: DEBIAN-CVE-2017-13742
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2017:3111 7.8

Red Hat Security Advisory: liblouis security update

Record: RHSA-2017:3111
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2017-13742 6.5

There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.

Record: UBUNTU-CVE-2017-13742
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUSN-3408-1 No score

liblouis vulnerabilities

It was discovered that an illegal address access can be made in Liblouis. A remote attacker can take advantange of this to access sensitive information. (CVE-2017-13738, CVE-2017-13744)

It was discovered a heap-based buffer overflow that causes bytes out-of-bounds write in Liblouis. A remote attacker can use this to denial of service or remote code execution. (CVE-2017-13739)

It was discovered a stack-based buffer overflow in Liblouis. A remote attacker can use this to denial of service or possibly unspecified other impact. (CVE-2017-13740, CVE-2017-13742)

Record: USN-3408-1
Updated: 2026-11-02

Affected products

liblouis

Affected packages

Affected packages
Package	Affected	Fixed
`liblouis` Debian:12	before 3.3.0-1	3.3.0-1
`liblouis` Debian:13	before 3.3.0-1	3.3.0-1
`liblouis` Debian:14	before 3.3.0-1	3.3.0-1
`liblouis` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-python` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-devel` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-doc` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-utils` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4

Show 14 moreShow less

Affected packages
Package	Affected	Fixed
`liblouis-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-python` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-devel` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-doc` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-utils` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-python` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-doc` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis-utils` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 0:2.5.2-11.el7_4	0:2.5.2-11.el7_4
`liblouis` Ubuntu:16.04:LTS	before 2.6.4-2ubuntu0.1, plus listed versions 2.6.2-22.6.4-2	2.6.4-2ubuntu0.1
`liblouis` Ubuntu:14.04:LTS From an advisory covering 5 CVEs	before 2.5.3-2ubuntu1.1, plus listed versions 2.5.3-22.5.3-2ubuntu1	2.5.3-2ubuntu1.1
`liblouis` Ubuntu:16.04:LTS From an advisory covering 5 CVEs	before 2.6.4-2ubuntu0.1, plus listed versions 2.6.2-22.6.4-2	2.6.4-2ubuntu0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-13742 is a medium vulnerability (CVSS 6.5) in Liblouis, published August 29, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. Fixed in liblouis 3.3.0-1.

References

Show 36 moreShow less