Alpine/xkbcomp: medium 5.5
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon
Action: Upgrade xkbcomp to 1.5.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0-r0 | - |
Fixed versions
| 1.5.0-r0 |
Sources
- osv: ALPINE-CVE-2018-15859#Alpine:v3.24/xkbcomp
- https://security.alpinelinux.org/vuln/CVE-2018-15859
published · modified · JSON