Home

CVE-2018-15859

Description

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.035

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2019:2079) Xorg security and bug fix update gdm-3.28.2-16.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update gdm-3.28.2-16.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update gdm-devel-3.28.2-16.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update gdm-devel-3.28.2-16.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update gdm-pam-extensions-devel-3.28.2-16.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update gdm-pam-extensions-devel-3.28.2-16.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libX11-1.6.7-2.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libX11-1.6.7-2.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libX11-common-1.6.7-2.el7.noarch.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libX11-devel-1.6.7-2.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libX11-devel-1.6.7-2.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-0.7.1-3.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-0.7.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-devel-0.7.1-3.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-devel-0.7.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-x11-0.7.1-3.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-x11-0.7.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-x11-devel-0.7.1-3.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update libxkbcommon-x11-devel-0.7.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update mesa-libGLw-8.0.0-5.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update mesa-libGLw-8.0.0-5.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update mesa-libGLw-devel-8.0.0-5.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update mesa-libGLw-devel-8.0.0-5.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-drv-ati-19.0.1-2.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-drv-vesa-2.4.0-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-0.36.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-devel-0.36.1-3.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-devel-0.36.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xdmx-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xephyr-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xnest-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xorg-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xvfb-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-Xwayland-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-common-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-devel-1.20.4-7.el7.i686.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-devel-1.20.4-7.el7.x86_64.rpmLinux
(RHSA-2019:2079) Xorg security and bug fix update xorg-x11-server-source-1.20.4-7.el7.noarch.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update xorg-x11-drv-vesa-2.4.0-3.el7.x86_64.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-0.36.1-3.el7.x86_64.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-devel-0.36.1-3.el7.i686.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update xorg-x11-drv-wacom-devel-0.36.1-3.el7.x86_64.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update gdm-pam-extensions-devel-3.28.2-16.el7.i686.rpmLinux
(CESA-2019:2079) Xorg security and bug fix update gdm-pam-extensions-devel-3.28.2-16.el7.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon-debugsource-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon-x11-0-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon-x11-0-32bit-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon-x11-0-debuginfo-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon-x11-0-debuginfo-32bit-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon0-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon0-32bit-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon0-debuginfo-0.6.1-9.3.1.x86_64.rpmLinux
SUSE-SU-2024:0037-1(SUSE Linux Enterprise Server 12 SP5 ) libxkbcommon0-debuginfo-32bit-0.6.1-9.3.1.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update gdm-debuginfo-3.28.2-16.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update gdm-debuginfo-3.28.2-16.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update libX11-debuginfo-1.6.7-2.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update libX11-debuginfo-1.6.7-2.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update libxkbcommon-debuginfo-0.7.1-3.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update libxkbcommon-debuginfo-0.7.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update mesa-libGLw-debuginfo-8.0.0-5.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update mesa-libGLw-debuginfo-8.0.0-5.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-drv-ati-debuginfo-19.0.1-2.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-drv-vesa-debuginfo-2.4.0-3.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-drv-wacom-debuginfo-0.36.1-3.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-drv-wacom-debuginfo-0.36.1-3.el7.x86_64.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-server-debuginfo-1.20.4-7.el7.i686.rpmLinux
(RHSA-2019:2079)Moderate: security and bug fix update xorg-x11-server-debuginfo-1.20.4-7.el7.x86_64.rpmLinux
Gdm update (ELSA-2019-2079) gdm-3.28.2-16.el7.i686.rpmLinux
Gdm update (ELSA-2019-2079) gdm-3.28.2-16.el7.x86_64.rpmLinux
LibX11 update (ELSA-2019-2079) libX11-1.6.7-2.el7.i686.rpmLinux
LibX11 update (ELSA-2019-2079) libX11-1.6.7-2.el7.x86_64.rpmLinux
LibX11-common update (ELSA-2019-2079) libX11-common-1.6.7-2.el7.noarch.rpmLinux
LibX11-devel update (ELSA-2019-2079) libX11-devel-1.6.7-2.el7.i686.rpmLinux
LibX11-devel update (ELSA-2019-2079) libX11-devel-1.6.7-2.el7.x86_64.rpmLinux
Libxkbcommon update (ELSA-2019-2079) libxkbcommon-0.7.1-3.el7.i686.rpmLinux
Libxkbcommon update (ELSA-2019-2079) libxkbcommon-0.7.1-3.el7.x86_64.rpmLinux
Libxkbcommon-devel update (ELSA-2019-2079) libxkbcommon-devel-0.7.1-3.el7.i686.rpmLinux
Libxkbcommon-devel update (ELSA-2019-2079) libxkbcommon-devel-0.7.1-3.el7.x86_64.rpmLinux
Libxkbcommon-x11 update (ELSA-2019-2079) libxkbcommon-x11-0.7.1-3.el7.i686.rpmLinux
Libxkbcommon-x11 update (ELSA-2019-2079) libxkbcommon-x11-0.7.1-3.el7.x86_64.rpmLinux
Mesa-libGLw update (ELSA-2019-2079) mesa-libGLw-8.0.0-5.el7.i686.rpmLinux
Mesa-libGLw update (ELSA-2019-2079) mesa-libGLw-8.0.0-5.el7.x86_64.rpmLinux
Mesa-libGLw-devel update (ELSA-2019-2079) mesa-libGLw-devel-8.0.0-5.el7.i686.rpmLinux
Mesa-libGLw-devel update (ELSA-2019-2079) mesa-libGLw-devel-8.0.0-5.el7.x86_64.rpmLinux
Xorg-x11-drv-ati update (ELSA-2019-2079) xorg-x11-drv-ati-19.0.1-2.el7.x86_64.rpmLinux
Xorg-x11-drv-vesa update (ELSA-2019-2079) xorg-x11-drv-vesa-2.4.0-3.el7.x86_64.rpmLinux
Xorg-x11-drv-wacom update (ELSA-2019-2079) xorg-x11-drv-wacom-0.36.1-3.el7.x86_64.rpmLinux
Xorg-x11-server-Xephyr update (ELSA-2019-2079) xorg-x11-server-Xephyr-1.20.4-7.el7.x86_64.rpmLinux
Xorg-x11-server-Xorg update (ELSA-2019-2079) xorg-x11-server-Xorg-1.20.4-7.el7.x86_64.rpmLinux
Xorg-x11-server-common update (ELSA-2019-2079) xorg-x11-server-common-1.20.4-7.el7.x86_64.rpmLinux
NULL Pointer Dereference Vulnerability (CVE-2018-15859)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234