« List of all CVEs

CVE-2018-15853

Published: 8/25/2018 Last updated: 8/5/2024 Reserved: 8/24/2018

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-xkbcommon

Products affected (1)

Product Vendor Version
n/a n/a <= 6.5.20

References (12)