{"id":"CVE-2023-26769","aliases":["ALSA-2023:6385","AZL-25652","DEBIAN-CVE-2023-26769","EUVD-2023-30562","GHSA-rvg4-44mx-vhr7","OESA-2023-1191","RHSA-2023:6385","RLSA-2023:6385","SUSE-SU-2023:1771-1","SUSE-SU-2023:1772-1","SUSE-SU-2023:1773-1","SUSE-SU-2023:1824-1","UBUNTU-CVE-2023-26769","USN-5996-1","openSUSE-SU-2024:13498-1"],"status":"published","title":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to...","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01157,"percentile":0.67331,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-03-16T00:00:00Z","modified":"2026-10-29T11:31:32Z","fixes":[{"ecosystem":"Azure Linux:2","package":"liblouis","fixed_in":["3.26.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"liblouis","fixed_in":["3.24.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"liblouis","fixed_in":["3.24.0-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"liblouis","fixed_in":["3.7.0-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"liblouis","fixed_in":["3.7.0-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"liblouis","fixed_in":["3.7.0-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"liblouis","fixed_in":["3.7.0-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblouis","fixed_in":["2.6.4-2ubuntu0.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","fixed_in":["3.5.0-1ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"liblouis","fixed_in":["3.12.0-3ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"liblouis","fixed_in":["3.20.0-2ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.0-1","3.24.0-2","3.26.0-1","3.26.0-1~bpo12+1","3.27.0-1","3.27.0-1~bpo12+1","3.27.0-1~bpo12+2","3.28.0-1","3.28.0-1~bpo12+2","3.29.0-1","3.29.0-1~bpo12+2","3.30.0-1","3.30.0-2","3.30.0-2~bpo12+1","3.31.0-1","3.31.0-2","3.31.0-2~bpo12+1","3.32.0-1","3.32.0-1~bpo12+1","3.33.0-1","3.33.0-1~bpo12+1","3.34.0-1","3.35.0-1","3.35.0-2","3.35.0-2~bpo13+1","3.36.0-1","3.36.0-1~bpo13+1","3.37.0-1","3.37.0-1~bpo13+1","3.38.0-1","3.38.0-1~bpo13+1","3.39.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.0-2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"liblouis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"liblouis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"liblouis-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.1-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150000.4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150000.4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150000.4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150000.4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.14.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python3-louis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-6.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-2ubuntu0.4+esm1"}]}],"versions":["2.6.2-2","2.6.4-2","2.6.4-2ubuntu0.1","2.6.4-2ubuntu0.2","2.6.4-2ubuntu0.3","2.6.4-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1ubuntu0.5"}]}],"versions":["3.0.0-3ubuntu1","3.3.0-1","3.4.1-1","3.5.0-1","3.5.0-1ubuntu0.1","3.5.0-1ubuntu0.2","3.5.0-1ubuntu0.3","3.5.0-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-3ubuntu0.2"}]}],"versions":["3.10.0-1","3.11.0-2","3.11.0-3","3.12.0-2","3.12.0-3","3.12.0-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.0-2ubuntu0.2"}]}],"versions":["3.18.0-1","3.18.0-1build1","3.19.0-2","3.20.0-2","3.20.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-2ubuntu0.4+esm1"}]}],"versions":["2.6.2-2","2.6.4-2","2.6.4-2ubuntu0.1","2.6.4-2ubuntu0.2","2.6.4-2ubuntu0.3","2.6.4-2ubuntu0.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1ubuntu0.5"}]}],"versions":["3.0.0-3ubuntu1","3.3.0-1","3.4.1-1","3.5.0-1","3.5.0-1ubuntu0.1","3.5.0-1ubuntu0.2","3.5.0-1ubuntu0.3","3.5.0-1ubuntu0.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-3ubuntu0.2"}]}],"versions":["3.10.0-1","3.11.0-2","3.11.0-3","3.12.0-2","3.12.0-3","3.12.0-3ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.0-2ubuntu0.2"}]}],"versions":["3.18.0-1","3.18.0-1build1","3.19.0-2","3.20.0-2","3.20.0-2ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"liblouis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.0-2.1"}]}],"bundled":2}],"products":[{"vendor":"liblouis","product":"liblouis"}],"references":[{"url":"https://github.com/liblouis/liblouis","tags":["x_transferred","Product","package","report"]},{"url":"https://github.com/liblouis/liblouis/pull/1300","tags":["x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26769","tags":["web","advisory"]},{"url":"http://loutrace.com","tags":["report"]},{"url":"https://github.com/advisories/GHSA-rvg4-44mx-vhr7"},{"url":"https://access.redhat.com/errata/RHSA-2023:6385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26768","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26769","tags":["report"]},{"url":"https://bugzilla.redhat.com/2181135","tags":["report"]},{"url":"https://bugzilla.redhat.com/2181139","tags":["report"]},{"url":"https://bugzilla.redhat.com/2181143","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6385.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26769.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-26769","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1191","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181143","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6385.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26767","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26768","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26769","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6385","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231771-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209429","tags":["report"]},{"url":"https://bugzilla.suse.com/1209432","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26769","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231772-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231773-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231824-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209431","tags":["report"]},{"url":"https://bugzilla.suse.com/1209855","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26768","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-26769","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5996-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5996-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-26767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-26768","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-26769","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T00:00:00Z","modified":"2026-07-09T00:24:15.637Z","updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30562","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T00:00:00Z","modified":"2026-07-09T00:24:15Z","updated_at":"2026-11-02T18:20:06.781463Z"}],"ghsa":[{"id":"GHSA-rvg4-44mx-vhr7","title":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to...","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T15:30:18Z","modified":"2023-03-30T05:09:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:54:25.211321Z"}],"nvd":[{"id":"CVE-2023-26769","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T15:15:10.343Z","modified":"2026-07-09T01:18:10.44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:49.031498Z"}],"osv":[{"id":"AZL-25652","title":"CVE-2023-26769 affecting package liblouis for versions less than 3.26.0-1","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T15:15:10Z","modified":"2026-04-21T04:23:09.926238Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"DEBIAN-CVE-2023-26769","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T15:15:10.343Z","modified":"2026-10-26T18:00:40.004603725Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1191","title":"liblouis security update","description":"The Liblouis software suite provides an open-source braille translator, back-translator and formatter for a large number of languages and braille codes. It is a set of libraries designed for use in any of a number of applications, both free and commercial. It is written in C so that it does not require a runtime environment and hence can be used in applications written in high-level languages such as Java and Python.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.(CVE-2023-26769)","status":"published","published":"2023-03-31T11:05:40Z","modified":"2026-08-18T01:17:37.878113832Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:6385","title":"Red Hat Security Advisory: liblouis security update","status":"published","published":"2024-09-16T11:50:33Z","modified":"2026-07-05T10:01:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RLSA-2023:6385","title":"Moderate: liblouis security update","description":"Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).\n\nSecurity Fix(es):\n\n* liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)\n\n* liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)\n\n* liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","status":"published","published":"2026-07-05T06:03:18.269222Z","modified":"2026-07-05T06:30:04.724460306Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-26769","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T15:15:00Z","modified":"2026-04-22T14:03:42.510863Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:6385","title":"Moderate: liblouis security update","description":"Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).\n\nSecurity Fix(es):\n\n* liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)\n* liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)\n* liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:32.168548726Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CVE-2023-26769","description":"Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.","status":"published","published":"2023-03-16T00:00:00Z","modified":"2026-10-28T02:30:43.729920562Z","updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"openSUSE-SU-2024:13498-1","title":"liblouis-data-3.25.0-2.1 on GA media","description":"These are all security issues fixed in the liblouis-data-3.25.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:48.150497Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:1771-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n \n- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).\n- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).\n","status":"published","published":"2023-04-05T10:36:40Z","modified":"2026-02-04T02:19:36.403508Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1772-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n  \n- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).\n- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).\n","status":"published","published":"2023-04-05T10:37:04Z","modified":"2026-02-04T03:36:09.152664Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1773-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n\n- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).\n- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).\n","status":"published","published":"2023-04-05T10:38:03Z","modified":"2026-02-04T03:45:54.782382Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1824-1","title":"Security update for liblouis","description":"This update for liblouis fixes the following issues:\n  \n- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).\n- CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431).\n- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).\n","status":"published","published":"2023-04-12T11:08:42Z","modified":"2026-02-04T03:54:24.835647Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5996-1","title":"liblouis vulnerabilities","description":"It was discovered that Liblouis incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2023-26767, CVE-2023-26768, CVE-2023-26769)\n","status":"published","published":"2023-04-04T10:51:32Z","modified":"2026-06-25T13:31:56.250062204Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}