CVE-2018-15864
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer d...
Original description
The description as published by the source.
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-15864 libxkbcommon Fixed in: 0.8.2-1
References
- advisory access.redhat.com
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- patch github.com
- patch lists.freedesktop.org