CVE-2022-31783 — MEDIUM (5.5)

Vulnerability Description

Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Liblouis	Liblouis	3.21.0
Fedoraproject	Fedora	36

Related Weaknesses (CWE)

CWE-787

References

https://github.com/liblouis/liblouis/commit/ff747ec5e1ac54d54194846f6fe5bfc68919PatchThird Party Advisory
https://github.com/liblouis/liblouis/issues/1214ExploitThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
https://security.gentoo.org/glsa/202301-06Third Party Advisory
https://github.com/liblouis/liblouis/commit/ff747ec5e1ac54d54194846f6fe5bfc68919PatchThird Party Advisory
https://github.com/liblouis/liblouis/issues/1214ExploitThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
https://security.gentoo.org/glsa/202301-06Third Party Advisory

FAQ

What is CVE-2022-31783?

CVE-2022-31783 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

How severe is CVE-2022-31783?

CVE-2022-31783 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31783?

Check the references section above for vendor advisories and patch information. Affected products include: Liblouis Liblouis, Fedoraproject Fedora.