CVE-2018-15853
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users...
Original description
The description as published by the source.
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-15853 xkbcomp Fixed in: 1.5.0-r0
- Debian DEBIAN-CVE-2018-15853 libxkbcommon Fixed in: 0.8.2-1
References
- advisory access.redhat.com
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- patch github.com
- patch lists.freedesktop.org