REDHAT-BUG-1737785: Buffer Overflow

Published Aug 6, 2019

Updated

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pangoitemize.

External References:

https://packetstormsecurity.com/files/153838/USN-4081-1.txt https://gitlab.gnome.org/GNOME/pango/issues/342

Affected Software

1 affected component

Gnome Pango>=1.42

Event History

Aug 6, 2019

Data Sourced

via Red Hat·08:41 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1737785?

The severity of REDHAT-BUG-1737785 is critical due to its potential for heap-based buffer overflow leading to code execution.

How do I fix REDHAT-BUG-1737785?

To fix REDHAT-BUG-1737785, it is recommended to update Gnome Pango to the latest patched version that addresses this vulnerability.

What versions of Gnome Pango are affected by REDHAT-BUG-1737785?

Gnome Pango version 1.42 and later are affected by REDHAT-BUG-1737785.

What type of vulnerability is REDHAT-BUG-1737785?

REDHAT-BUG-1737785 is classified as a buffer overflow vulnerability.

What component of Gnome Pango is affected by REDHAT-BUG-1737785?

The component affected by REDHAT-BUG-1737785 is the function pango_log2vis_get_embedding_levels.