CVE Vulnerabilities

CVE-2018-15856

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Aug 25, 2018 | Modified: Oct 03, 2019
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Ubuntu
MEDIUM

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Xkbcommon Xkbcommon * 0.8.1 (excluding)
Red Hat Enterprise Linux 7 RedHat gdm-1:3.28.2-16.el7 *
Red Hat Enterprise Linux 7 RedHat libX11-0:1.6.7-2.el7 *
Red Hat Enterprise Linux 7 RedHat libxkbcommon-0:0.7.1-3.el7 *
Red Hat Enterprise Linux 7 RedHat mesa-libGLw-0:8.0.0-5.el7 *
Red Hat Enterprise Linux 7 RedHat xorg-x11-drv-ati-0:19.0.1-2.el7 *
Red Hat Enterprise Linux 7 RedHat xorg-x11-drv-vesa-0:2.4.0-3.el7 *
Red Hat Enterprise Linux 7 RedHat xorg-x11-drv-wacom-0:0.36.1-3.el7 *
Red Hat Enterprise Linux 7 RedHat xorg-x11-server-0:1.20.4-7.el7 *
Libxkbcommon Ubuntu bionic *
Libxkbcommon Ubuntu trusty *
Libxkbcommon Ubuntu upstream *
Libxkbcommon Ubuntu xenial *

References