[Bug 1737785] New: CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution

List overview All Threads
Download

newer

older

[Bug 500110]...

[Bug 1258542] Review Request:...

bugzilla＠redhat.com

6 Aug 2019 6 Aug '19

8:41 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Bug ID: 1737785 Summary: CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: mrehak@redhat.com CC: caillon+fedoraproject@gmail.com, eng-i18n-bugs@redhat.com, fonts-bugs@lists.fedoraproject.org, gnome-sig@lists.fedoraproject.org, i18n-bugs@lists.fedoraproject.org, john.j5live@gmail.com, mclasen@redhat.com, pwu@redhat.com, rhughes@redhat.com, rstrode@redhat.com, sandmann@redhat.com, tagoh@redhat.com Target Milestone: --- Classification: Other

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

External References:

https://packetstormsecurity.com/files/153838/USN-4081-1.txt

-- You are receiving this mail because: You are on the CC list for the bug.

Show replies by date

bugzilla＠redhat.com

6 Aug 6 Aug

8:41 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Marian Rehak mrehak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1737786

--- Comment #1 from Marian Rehak mrehak@redhat.com --- Created pango tracking bugs for this issue:

Affects: fedora-all [bug 1737786]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1737786 [Bug 1737786] CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution [fedora-all]

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

8:41 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Marian Rehak mrehak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1737787

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

7 Aug 7 Aug

4:08 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: heap based buffer overflow can be used to get code execution

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Comment #2 from Stefan Cornelius scorneli@redhat.com --- Patch: https://gitlab.gnome.org/GNOME/pango/commit/490f8979a260c16b1df055eab386345d...

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

8:52 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Stefan Cornelius scorneli@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

8:53 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Stefan Cornelius scorneli@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

21 Aug 21 Aug

1:04 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785 Bug 1737785 depends on bug 1737786, which changed state.

Bug 1737786 Summary: CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap based buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1737786

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

26 Aug 26 Aug

11:47 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Tomas Hoger thoger@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

28 Aug 28 Aug

5:01 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Comment #6 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 7

Via RHSA-2019:2571 https://access.redhat.com/errata/RHSA-2019:2571

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

5:01 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

7:07 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Product Security DevOps Team prodsec-dev@redhat.com changed:

--- Comment #7 from Product Security DevOps Team prodsec-dev@redhat.com --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2019-1010238

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

29 Aug 29 Aug

6:50 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Comment #8 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 8

Via RHSA-2019:2582 https://access.redhat.com/errata/RHSA-2019:2582

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

6:50 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

4 Sep 4 Sep

6:30 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

5 Sep 5 Sep

12:59 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

1:01 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

1:01 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

5:27 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

9 Sep 9 Sep

4:16 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

10 Sep 10 Sep

4:07 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Comment #13 from Jens Petersen petersen@redhat.com --- Anyway I requested 7.6.z now in bug 1738459 - I hope that works even though the bug is closed since we shipped the 7.7.z update.

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

11 Sep 11 Sep

3:42 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

3:42 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

12 Sep 12 Sep

3:58 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

16 Sep 16 Sep

2:59 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

17 Sep 17 Sep

12:37 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

19 Sep 19 Sep

4:02 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

26 Sep 26 Sep

8:26 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

27 Sep 27 Sep

9:39 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

Marian Rehak mrehak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1756290

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

3 Oct 3 Oct

3:29 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

14 Oct 14 Oct

9:36 a.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

29 Oct 29 Oct

2:03 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Comment #17 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 7.6 Extended Update Support

Via RHSA-2019:3234 https://access.redhat.com/errata/RHSA-2019:3234

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

2:03 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

30 Apr 30 Apr

5:34 p.m.

New subject: [Bug 1737785] CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

https://bugzilla.redhat.com/show_bug.cgi?id=1737785

--- Doc Text *updated* by Eric Christensen sparks@redhat.com --- A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability.

-- You are receiving this mail because: You are on the CC list for the bug.

2271

Age (days ago)

2539

Last active (days ago)

fonts-bugs@lists.fedoraproject.org

32 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com