CVE-2018-15857

Published: Aug 25, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

GLSA-201810-05

vendor-advisory

x_refsource_GENTOO

USN-3786-1

vendor-advisory

x_refsource_UBUNTU

https://github.com/xkbcommon/libxkbcommon/commit/c1e5ac16e77a21f87bdf3bc4dea61b037a17dddb

x_refsource_MISC

USN-3786-2

vendor-advisory

x_refsource_UBUNTU

https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html

x_refsource_MISC

RHSA-2019:2079

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-15857

Description

Affected Products

References