217 matches found
CVE-2018-15858
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file...
CVE-2018-15864
Unchecked NULL pointer usage in resolvekeysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created...
CVE-2018-15862
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers...
CVE-2018-15863
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...
CVE-2018-15861
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file that triggers an xkbinternatom failure...
CVE-2018-15857
An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file...
CVE-2018-15856
An infinite loop when reaching EOL unexpectedly in compose/parser.c aka the keymap parser in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files...
CVE-2018-15855
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkbgeometry section was mishandled...
CVE-2018-15854
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly...
CVE-2018-15859
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...
xkbcommon infinite loop vulnerability
xkbcommon is a keyboard key mapping compiler and support library. An infinite loop vulnerability exists in the compose/parser.c file in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to cause a denial of service with the help of a specially crafted keymap file...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02670)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'LookupModMask' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02661)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in versions of xkbcommon prior to 0.8.1, which stems from a program that incorrectly handles the xkbFile in the xkbgeometry section, and which can be exploited by a local attacker to...
xkbcommon Null Pointer Dereference Vulnerability
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'resolvekeysym' function of the xkbcomp/parser.y file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...
xkbcommon infinite recursion vulnerability
xkbcommon is a keyboard key mapping compiler and support library. An infinite recursion vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to crash an xkbcommon user by submitting a specially crafted keymap file...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02669)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ResolveStateAndPredicate' function of the xkbcomp/compat.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker to cause the...
xkbcommon Invalid Release Vulnerability
xkbcommon is a keyboard key mapping compiler and support library. An invalid release vulnerability exists in the 'ExprAppendMultiKeysymList' function in the xkbcomp/ast-build.c file in versions of xkbcommon prior to xkbcommon 0.8.1, which can be exploited by a local attacker by submitting a...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02662)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to cause the xkbcommon parser to crash null pointer backreference by submitting a specially crafted...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02666)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'CopyKeyAliasesToKeymap' function of the xkbcomp/keycodes.c file in versions of xkbcommon prior to xkbcommon 0.8.1, which stems from a failure of the program to check for the u...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02664)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ExprResolveLhs' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...