CVE-2018-15853

CVE-2018-15853 – xkbcommon/xkbcomp crash due to endless recursion . A vulnerability in libxkbcommon (and xkbcomp) before 0.8.1 allows a local attacker to crash a user via a specially crafted keymap file that triggers boolean negation in xkbcomp/expr.c. The issue is a local denial of service with ...

CVE-2018-15857

The CVE-2018-15857 entry describes an invalid free in xkbcomp/ast-build.c (ExprAppendMultiKeysymList) in libxkbcommon prior to 0.8.1 that could allow a local attacker to crash the xkbcommon keymap parsers or possibly have unspecified impact by supplying a crafted keymap file. The issue is caused ...

CVE-2018-15859

CVE-2018-15859 : Unchecked NULL pointer usage in xkbcommon's xkbcomp/ExprResolveLhs can crash the parser via a crafted keymap file (local attacker). Affects xkbcommon prior to 0.8.2. Connected advisories show fixes in updated xkbcommon/xorg-x11-server packages (e.g., Fedora/CentOS/RHEL updates li...

CVE-2018-15861

The CVE-2018-15861 entry concerns the xkbcommon/xkbcomp parser. A NULL pointer dereference in ExprResolveLhs (in xkbcomp/expr.c) affects xkbcommon prior to 0.8.2, enabling a local attacker to crash the xkbcommon parser by supplying a crafted keymap file (triggering an xkb_intern_atom failure). Af...

CVE-2018-15858

CVE-2018-15858 affects libxkbcommon (xkbcommon) prior to 0.8.1. The issue is an unchecked NULL pointer usage in CopyKeyAliasesToKeymap within xkbcomp/keycodes.c, which could allow a local attacker to crash the xkbcommon parser by supplying a crafted keymap file. Affected platforms reference updat...

CVE-2018-15864

The CVE-2018-15864 issue affects libxkbcommon/xkbcomp: unchecked NULL pointer usage in resolve_keysym (parser.y) could crash the xkbcommon parser when processing a crafted keymap file, prior to 0.8.2. Local attackers could cause a NULL dereference via a map access on a non-created map. Public adv...

CVE-2018-15862

CVE-2018-15862 affects libxkbcommon/xkbcomp before v0.8.2; unchecked NULL pointer usage in LookupModMask could crash the xkbcommon parser when processing a crafted keymap file with invalid virtual modifiers. Impact is local crash; no exploit details provided in the documents. Mitigations in conne...

CVE-2018-15863

The CVE-2018-15863 entry refers to an issue in libxkbcommon/xkbcomp where an unchecked NULL pointer dereference in ResolveStateAndPredicate (xkbcomp/compat.c) can crash the xkbcommon parser when presented with a crafted keymap file containing a no-op modmask expression. Affected component: libxkb...