CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The compo...

Original description

The description as published by the source.

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2019-1010238 pango Fixed in: 1.42.4-r2
Debian DEBIAN-CVE-2019-1010238 pango1.0 Fixed in: 1.42.4-7

References

advisory access.redhat.com
advisory access.redhat.com
advisory access.redhat.com
advisory access.redhat.com
advisory access.redhat.com
advisory seclists.org
advisory security.gentoo.org
advisory usn.ubuntu.com
advisory debian.org
patch gitlab.gnome.org
patch oracle.com
report gitlab.gnome.org
web lists.fedoraproject.org
web lists.fedoraproject.org