REDHAT-BUG-1576111: Buffer Overflow
A flaw was found in libgxps through 0.3.0. There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c. A crafted input will lead to a remote denial of service attack.
References: https://bugzilla.redhat.com/showbug.cgi?id=1574844
Patches: https://git.gnome.org/browse/libgxps/commit/?id=b458226e162fe1ffe7acb4230c114a52ada5131b https://git.gnome.org/browse/libgxps/commit/?id=133fe2a96e020d4ca65c6f64fb28a404050ebbfd
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1576111?
The severity of REDHAT-BUG-1576111 is high due to its potential for causing a remote denial of service.
How do I fix REDHAT-BUG-1576111?
You can fix REDHAT-BUG-1576111 by updating to a version of libgxps that is newer than 0.3.0.
What type of vulnerability is REDHAT-BUG-1576111?
REDHAT-BUG-1576111 is a heap-based buffer over-read vulnerability.
Which software is affected by REDHAT-BUG-1576111?
The affected software for REDHAT-BUG-1576111 is GNOME libgxps version 0.3.0 and earlier.
What could be the impact of exploiting REDHAT-BUG-1576111?
Exploiting REDHAT-BUG-1576111 could lead to a remote denial of service, affecting the availability of the application.