Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-1010238 →
DEBIAN-CVE-2019-1010238
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The compo...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
pango1.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.4-7"}]}]
Debian:13
pango1.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.4-7"}]}]
Debian:14
pango1.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.4-7"}]}]
Références
- advisory security-tracker.debian.org