libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...

GLSA-201810-05 : xkbcommon: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-05 xkbcommon: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxkbcommon. Please review the CVE identifiers referenced below for details. Impact : A local attacker could supply a specially crafte...

xkbcommon: Multiple vulnerabilities

Background xkbcommon is a library to handle keyboard descriptions, including loading them from disk, parsing them and handling their state. Description Multiple vulnerabilities have been discovered in libxkbcommon. Please review the CVE identifiers referenced below for details. Impact A local...

CVE-2018-15864

Unchecked NULL pointer usage in resolvekeysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created...

CVE-2018-15862

Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers...

CVE-2018-15863

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...

CVE-2018-15861

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file that triggers an xkbinternatom failure...

CVE-2018-15856

An infinite loop when reaching EOL unexpectedly in compose/parser.c aka the keymap parser in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files...

CVE-2018-15855

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkbgeometry section was mishandled...

CVE-2018-15854

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly...

CVE-2018-15859

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...

xkbcommon infinite recursion vulnerability

xkbcommon is a keyboard key mapping compiler and support library. An infinite recursion vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to crash an xkbcommon user by submitting a specially crafted keymap file...

xkbcommon infinite loop vulnerability

xkbcommon is a keyboard key mapping compiler and support library. An infinite loop vulnerability exists in the compose/parser.c file in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to cause a denial of service with the help of a specially crafted keymap file...

xkbcommon Invalid Release Vulnerability

xkbcommon is a keyboard key mapping compiler and support library. An invalid release vulnerability exists in the 'ExprAppendMultiKeysymList' function in the xkbcomp/ast-build.c file in versions of xkbcommon prior to xkbcommon 0.8.1, which can be exploited by a local attacker by submitting a...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02664)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ExprResolveLhs' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02662)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to cause the xkbcommon parser to crash null pointer backreference by submitting a specially crafted...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02666)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'CopyKeyAliasesToKeymap' function of the xkbcomp/keycodes.c file in versions of xkbcommon prior to xkbcommon 0.8.1, which stems from a failure of the program to check for the u...

xkbcommon Null Pointer Dereference Vulnerability

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'resolvekeysym' function of the xkbcomp/parser.y file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...

xkbcommon null pointer dereference vulnerability (NVD-C-2018-95719)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ExprResolveLhs' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02670)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'LookupModMask' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...