USN-3786-2
- Source
- https://ubuntu.com/security/notices/USN-3786-2
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3786-2.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3786-2
- Upstream
- Related
- Published
- 2018-11-06T14:53:08.622027Z
- Modified
- 2025-10-13T04:34:44Z
- Summary
- libxkbcommon vulnerabilities
- Details
-
USN-3786-1 fixed several vulnerabilities in libxkbcommon. This update provides the corresponding update for Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864)
- References
-
- https://ubuntu.com/security/notices/USN-3786-2
- https://ubuntu.com/security/CVE-2018-15853
- https://ubuntu.com/security/CVE-2018-15854
- https://ubuntu.com/security/CVE-2018-15855
- https://ubuntu.com/security/CVE-2018-15856
- https://ubuntu.com/security/CVE-2018-15857
- https://ubuntu.com/security/CVE-2018-15858
- https://ubuntu.com/security/CVE-2018-15859
- https://ubuntu.com/security/CVE-2018-15861
- https://ubuntu.com/security/CVE-2018-15862
- https://ubuntu.com/security/CVE-2018-15863
- https://ubuntu.com/security/CVE-2018-15864
Affected packages
Ubuntu:18.04:LTS / libxkbcommon
Package
- Name
- libxkbcommon
- Purl
- pkg:deb/ubuntu/libxkbcommon@0.8.0-1ubuntu0.1?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.8.0-1ubuntu0.1
Ecosystem specific
{
"binaries": [
{
"binary_version": "0.8.0-1ubuntu0.1",
"binary_name": "libxkbcommon-dev"
},
{
"binary_version": "0.8.0-1ubuntu0.1",
"binary_name": "libxkbcommon-x11-0"
},
{
"binary_version": "0.8.0-1ubuntu0.1",
"binary_name": "libxkbcommon-x11-dev"
},
{
"binary_version": "0.8.0-1ubuntu0.1",
"binary_name": "libxkbcommon0"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
],
"id": "CVE-2018-15853"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15854"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15855"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15856"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15857"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15858"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15859"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15861"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15862"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15863"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2018-15864"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}