CVE-2022-25308: Buffer Overflow
A stack based buffer overflow was found in fribidi.
References:
https://github.com/fribidi/fribidi/issues/181
Other sources
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-25308?
CVE-2022-25308 is a stack-based buffer overflow vulnerability found in the Fribidi package.
What is the severity of CVE-2022-25308?
The severity of CVE-2022-25308 is high with a CVSS score of 7.8.
How does CVE-2022-25308 affect Fribidi?
CVE-2022-25308 allows an attacker to pass a specially crafted file to the Fribidi application, which can result in a possible memory leak or a denial of service.
Which software versions are affected by CVE-2022-25308?
GNU FriBidi version up to and excluding 1.0.12, Redhat Enterprise Linux 8.0, and Redhat Enterprise Linux 9.0 are affected by CVE-2022-25308.
How can I fix CVE-2022-25308?
Apply the latest patches or updates provided by the vendor.