This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-15864 →

DEBIAN-CVE-2018-15864

Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer d...

Original description

The description as published by the source.

Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libxkbcommon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}]

Debian:13 libxkbcommon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}]

Debian:14 libxkbcommon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}]

References

advisory security-tracker.debian.org