{
  "fix": "libxkbcommon0 0.8.0-1ubuntu0.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libxkbcommon0-0.8.0-1ubuntu0.1",
  "summary": "libxkbcommon0 0.8.0-1ubuntu0.1, released August 24, 2018, fixes 11 CVEs in libxkbcommon0. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "libxkbcommon0 0.8.0-1ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2018-08-24T17:00:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 11 CVEs, none high severity",
  "supported": false,
  "cveCount": 11,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00535,
  "appliesTo": [
    {
      "product": "libxkbcommon0",
      "productUrl": "https://patchblox.com/security/product/linux/libxkbcommon0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.8.0-1ubuntu0.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-15853",
      "url": "https://patchblox.com/security/cve/CVE-2018-15853",
      "title": "xkbcomp: endless recursion triggered by a crafted keymap file that induces boolean negation can lead to a",
      "priority": "Routine",
      "severity": "low",
      "epss": 0.00535,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15859",
      "url": "https://patchblox.com/security/cve/CVE-2018-15859",
      "title": "xkbcomp: NULL pointer dereference triggered by a specially a crafted keymap file can lead to a crash",
      "priority": "Routine",
      "severity": "low",
      "epss": 0.00535,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15861",
      "url": "https://patchblox.com/security/cve/CVE-2018-15861",
      "title": "xkbcomp: NULL pointer dereference triggered by a crafted keymap file that induces an \u0060xkb_intern_atom\u0060 failure",
      "priority": "Routine",
      "severity": "low",
      "epss": 0.00535,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15863",
      "url": "https://patchblox.com/security/cve/CVE-2018-15863",
      "title": "xkbcomp: NULL pointer dereference triggered by a a crafted keymap file with a no-op modmask expression can",
      "priority": "Routine",
      "severity": "low",
      "epss": 0.00535,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15857",
      "url": "https://patchblox.com/security/cve/CVE-2018-15857",
      "title": "libxkbcommon0: An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15854",
      "url": "https://patchblox.com/security/cve/CVE-2018-15854",
      "title": "libxkbcommon0: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefe...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15855",
      "url": "https://patchblox.com/security/cve/CVE-2018-15855",
      "title": "libxkbcommon0: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefe...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15862",
      "url": "https://patchblox.com/security/cve/CVE-2018-15862",
      "title": "libxkbcommon0: Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local atta...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15864",
      "url": "https://patchblox.com/security/cve/CVE-2018-15864",
      "title": "libxkbcommon0: Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15858",
      "url": "https://patchblox.com/security/cve/CVE-2018-15858",
      "title": "libxkbcommon0: Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcomm...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-15856",
      "url": "https://patchblox.com/security/cve/CVE-2018-15856",
      "title": "libxkbcommon0: An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00428,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}