{"id":"CVE-2018-17294","aliases":["DEBIAN-CVE-2018-17294","EUVD-2018-9050","GHSA-xg7f-9m4r-jh69","SUSE-SU-2019:0795-1","SUSE-SU-2019:13994-1","SUSE-SU-2020:3107-1","UBUNTU-CVE-2018-17294","USN-3782-1","openSUSE-SU-2019:1160-1"],"status":"published","title":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not...","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02716,"percentile":0.86117,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-09-21T00:00:00Z","modified":"2026-10-23T18:03:55Z","fixes":[{"ecosystem":"Debian:12","package":"liblouis","fixed_in":["3.7.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"liblouis","fixed_in":["3.7.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"liblouis","fixed_in":["3.7.0-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"liblouis","fixed_in":["1.7.0-1.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"python-louis","fixed_in":["1.7.0-1.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"liblouis","fixed_in":["1.7.0-1.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"python-louis","fixed_in":["1.7.0-1.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"liblouis","fixed_in":["2.6.4-6.9.24"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"liblouis","fixed_in":["2.6.4-6.9.24"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-louis","fixed_in":["2.6.4-6.9.39"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-louis","fixed_in":["2.6.4-6.9.41"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"liblouis","fixed_in":["2.6.4-6.9.24"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-louis","fixed_in":["2.6.4-6.9.39"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-louis","fixed_in":["2.6.4-6.9.41"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","fixed_in":["3.5.0-1ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-4.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.24"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.24"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.39"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.41"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.24"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.39"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.9.41"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1ubuntu0.3"}]}],"versions":["3.0.0-3ubuntu1","3.3.0-1","3.4.1-1","3.5.0-1","3.5.0-1ubuntu0.1","3.5.0-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2ubuntu1.5"}]}],"versions":["2.5.3-2","2.5.3-2ubuntu1","2.5.3-2ubuntu1.1","2.5.3-2ubuntu1.2","2.5.3-2ubuntu1.3","2.5.3-2ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-2ubuntu0.4"}]}],"versions":["2.6.2-2","2.6.4-2","2.6.4-2ubuntu0.1","2.6.4-2ubuntu0.2","2.6.4-2ubuntu0.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1ubuntu0.3"}]}],"versions":["3.0.0-3ubuntu1","3.3.0-1","3.4.1-1","3.5.0-1","3.5.0-1ubuntu0.1","3.5.0-1ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-lp150.3.3.1"}]}],"bundled":8}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"liblouis","product":"liblouis"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/liblouis/liblouis/issues/635","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"https://usn.ubuntu.com/3782-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/105511","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396e","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17294"},{"url":"https://github.com/advisories/GHSA-xg7f-9m4r-jh69"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-17294","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190795-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1094685","tags":["report"]},{"url":"https://bugzilla.suse.com/1095189","tags":["report"]},{"url":"https://bugzilla.suse.com/1095825","tags":["report"]},{"url":"https://bugzilla.suse.com/1095826","tags":["report"]},{"url":"https://bugzilla.suse.com/1095827","tags":["report"]},{"url":"https://bugzilla.suse.com/1095945","tags":["report"]},{"url":"https://bugzilla.suse.com/1097103","tags":["report"]},{"url":"https://bugzilla.suse.com/1109319","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17294","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913994-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203107-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-17294","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3782-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12085","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QCDNK5Q6ITKQTT77S47V5FM4FO26BMI5/#QCDNK5Q6ITKQTT77S47V5FM4FO26BMI5","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-17294","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T06:00:00Z","modified":"2024-08-05T10:47:04.363Z","updated_at":"2026-11-02T14:35:07.672841Z"}],"euvd":[{"id":"EUVD-2018-9050","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T06:00:00Z","modified":"2024-08-05T10:47:04Z","updated_at":"2026-11-03T02:39:39.229856Z"}],"ghsa":[{"id":"GHSA-xg7f-9m4r-jh69","title":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not...","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2022-05-14T01:09:23Z","modified":"2023-02-02T05:03:09Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:35.055103Z"}],"nvd":[{"id":"CVE-2018-17294","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T07:29:00.617Z","modified":"2026-06-17T01:45:37.783Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:40.661264Z"}],"osv":[{"id":"CVE-2018-17294","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T07:29:00.617Z","modified":"2026-10-20T13:32:43.560097812Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-17294","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T07:29:00.617Z","modified":"2026-10-23T18:03:55.553607039Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"UBUNTU-CVE-2018-17294","description":"The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.","status":"published","published":"2018-09-21T00:00:00Z","modified":"2026-04-22T11:48:37.310857Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"openSUSE-SU-2019:1160-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function \n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n- CVE-2018-11410: Fixed an invalid free in the compileRule function in\n  compileTranslationTable.c (bsc#1094685)\n- CVE-2018-11440: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (bsc#1095189)\n- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c\n  (bsc#1095945)\n- CVE-2018-11683: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1095827)\n- CVE-2018-11684: Fixed stack-based buffer overflow in the function\n  includeFile() in compileTranslationTable.c (bsc#1095826)\n- CVE-2018-11685: Fixed a stack-based buffer overflow in the function\n  compileHyphenation() in compileTranslationTable.c (bsc#1095825)\n- CVE-2018-12085: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1097103)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-05T10:06:53Z","modified":"2026-02-04T03:56:06.836878Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:0795-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function \n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n- CVE-2018-11410: Fixed an invalid free in the compileRule function in\n  compileTranslationTable.c (bsc#1094685)\n- CVE-2018-11440: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (bsc#1095189)\n- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c\n  (bsc#1095945)\n- CVE-2018-11683: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1095827)\n- CVE-2018-11684: Fixed stack-based buffer overflow in the function\n  includeFile() in compileTranslationTable.c (bsc#1095826)\n- CVE-2018-11685: Fixed a stack-based buffer overflow in the function\n  compileHyphenation() in compileTranslationTable.c (bsc#1095825)\n- CVE-2018-12085: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1097103)\n","status":"published","published":"2019-03-28T12:22:17Z","modified":"2026-02-04T02:15:09.356136Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13994-1","title":"Security update for liblouis","description":"This update for liblouis and python-louis fixes the following issue:\n\nSecurity issue fixed: \n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function\n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n","status":"published","published":"2019-03-29T12:17:38Z","modified":"2026-02-04T03:21:11.464212Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2020:3107-1","title":"Security update for liblouis","description":"This update for liblouis, python-luis and python3-louis fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function \n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n","status":"published","published":"2020-10-30T09:55:50Z","modified":"2026-02-04T04:19:05.931498Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-3782-1","title":"liblouis vulnerabilities","description":"Henri Salo discovered that Liblouis incorrectly handled certain files.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-12085)\n\nIt was discovered that Liblouis incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2018-17294)\n","status":"published","published":"2018-10-03T12:01:06Z","modified":"2026-04-22T09:49:42.408467Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}