CVE-2018-15861

🗓️ 28 Aug 2018 12:20:54Reported by redhat.comType

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash the xkbcommon parser by supplying a crafted keymap file triggering an xkb_intern_atom failure

Reporter	Title	Published	Views	Family All 101
Tenable Nessus	Amazon Linux 2 : xorg-x11-server (ALAS-2020-1433)	4 Jun 202000:00	–	nessus
Tenable Nessus	CentOS 7 : gdm / libX11 / libxkbcommon / xorg-x11-drv-ati / xorg-x11-drv-vesa / etc (CESA-2019:2079)	30 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libxkbcommon (EulerOS-SA-2019-2540)	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : libxkbcommon (EulerOS-SA-2020-1246)	13 Mar 202000:00	–	nessus
Tenable Nessus	Fedora 43 : xkbcomp (2025-3a9b79ca0e)	8 Dec 202500:00	–	nessus
Tenable Nessus	Fedora 42 : xkbcomp (2025-e110b32ac7)	14 Dec 202500:00	–	nessus
Tenable Nessus	FreeBSD : xkbcomp -- Several vulnerabilities (c7187676-d176-11f0-841f-843a4b343614)	8 Dec 202500:00	–	nessus
Tenable Nessus	GLSA-201810-05 : xkbcommon: Multiple vulnerabilities	31 Oct 201800:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : libxkbcommon Multiple Vulnerabilities (NS-SA-2019-0199)	24 Oct 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : libxkbcommon Multiple Vulnerabilities (NS-SA-2019-0246)	31 Dec 201900:00	–	nessus

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

09 Nov 2021 00:21Current

2.8Low risk

Vulners AI Score2.8

CVSS 22.1

CVSS 33.3 - 5.5

EPSS0.0007