CVE-2018-15853

ADVISORY - nist

Summary

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

EPSS Score⁠: 0.00553 (0.437)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-400⁠

Uncontrolled Resource Consumption

ADVISORY - redhat

CWE-674⁠

Uncontrolled Recursion

Impacted images

Advisories

NIST

CREATED

8 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2018-15853⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-400⁠

CVSS SCORE

5.5medium

Alpine

CREATED

9 months ago

UPDATED

2 days ago

ADVISORY IDCVE-2018-15853⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

8 years ago

UPDATED

6 days ago

ADVISORY IDCVE-2018-15853⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

8 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2018-15853⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5low

Amazon

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALAS2-2020-1433⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

8 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2018-15853⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

3.3low

Oracle

CREATED

7 years ago

UPDATED

7 years ago

ADVISORY IDELSA-2019-2079⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium