NetSight
IP …
critical9.8

CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow.

Impact

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

Affected products

VendorProductAffected versions
GnomePango
from 1.42.0 through 1.44
OracleSd-Wan Edge
Versions 7.3, 8.0, 8.1, 8.2
FedoraprojectFedora
Versions 29, 30
DebianDebian Linux
Version 10.0
CanonicalUbuntu Linux
Version 19.04
RedhatOpenshift Container Platform
Versions 3.11, 4.1
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.6, 8.1, 8.2, 8.4
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.6, 7.7, 8.2, 8.4
RedhatEnterprise Linux Server Tus
Versions 7.6, 7.7, 8.2, 8.4

Weakness classification

CWE-787

References