OESA-2023-1949

    Dashboard / Vulnerabilities / OESA-2023-1949

    OESA-2023-1949

    Published: 22 Dec 2023Last Modified: 18 Aug 2026
    Upstream:
    CVE-2022-26981

    Summary: liblouis security update

    Details: The Liblouis software suite provides an open-source braille translator, back-translator and formatter for a large number of languages and braille codes. It is a set of libraries designed for use in any of a number of applications, both free and commercial. It is written in C so that it does not require a runtime environment and hence can be used in applications written in high-level languages such as Java and Python. Security Fix(es): Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).(CVE-2022-26981)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1949, https://nvd.nist.gov/vuln/detail/CVE-2022-26981

    Affected packages

    Package

    Name: liblouis

    Purl: pkg:rpm/openEuler/liblouis&distro=openEuler-20.03-LTS-SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.7.0-5.oe2003sp4

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2023-1949 | CVE-DB