Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2018-15863

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.

Related bugs and status

CVE-2018-15863 (Candidate) is related to these bugs:

Bug #1772512: Unable to install i386 and amd64 arch at the same time

Summary				In	Importance	Status
	1772512	Unable to install i386 and amd64 arch at the same time		libxkbcommon (Ubuntu)	Undecided	Fix Released
	1772512	Unable to install i386 and amd64 arch at the same time		libxkbcommon (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/xkb...
MISC: https://lists.freedesk...
UBUNTU: USN-3786-1
GENTOO: GLSA-201810-05
UBUNTU: USN-3786-2
REDHAT: RHSA-2019:2079