Infinite loop in Cairo - CVE-2019-6462

Vulnerability identifier: #VU17099

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-6462

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized. A remote attacker can consume all available system resources and cause denial of service conditions.

Cairo
Gentoo Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
Desktop Applications Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
cairo (Ubuntu package)
libcairo2 (Ubuntu package)
cairo-perf-utils (Ubuntu package)
cairo-devel
libcairo2-debuginfo-32bit
libcairo2-32bit
libcairo-gobject2-debuginfo-32bit
libcairo-gobject2-32bit
libcairo2-debuginfo
libcairo-script-interpreter2-debuginfo
cairo-debugsource
libcairo-gobject2
libcairo-script-interpreter2
libcairo2
libcairo-gobject2-debuginfo
cairo
cairo-debuginfo
cairo-devel-64bit
libcairo-script-interpreter2-64bit
libcairo-script-interpreter2-64bit-debuginfo
libcairo-gobject2-32bit-debuginfo
cairo-tools
cairo-tools-debuginfo
libcairo2-64bit-debuginfo
libcairo2-32bit-debuginfo
libcairo-script-interpreter2-32bit
cairo-devel-32bit
libcairo-script-interpreter2-32bit-debuginfo
libcairo-gobject2-64bit-debuginfo
libcairo-gobject2-64bit
libcairo2-64bit
x11-libs/cairo

Install update from vendor's website.

Cairo - update to 1.16.1
cairo (Ubuntu package) - addressed in versions 1.14.6-1ubuntu0.1~esm2, 1.15.10-2ubuntu0.1+esm1, 1.16.0-4ubuntu1+esm1, 1.16.0-5ubuntu2.1
libcairo2 (Ubuntu package) - update to 1.14.61ubuntu0.1~esm1
cairo-perf-utils (Ubuntu package) - update to 1.14.61ubuntu0.1~esm1
cairo-devel - addressed in versions 1.15.2-25.6.2, 1.16.0-150400.11.3.1
libcairo2-debuginfo-32bit - update to 1.15.2-25.6.2
libcairo2-32bit - addressed in versions 1.15.2-25.6.2, 1.16.0-150400.11.3.1
libcairo-gobject2-debuginfo-32bit - update to 1.15.2-25.6.2
libcairo-gobject2-32bit - addressed in versions 1.15.2-25.6.2, 1.16.0-150400.11.3.1
libcairo2-debuginfo - addressed in versions 1.15.2-25.6.2, 1.16.0-150200.5.5.1, 1.16.0-150400.11.3.1
libcairo-script-interpreter2-debuginfo - addressed in versions 1.15.2-25.6.2, 1.16.0-150400.11.3.1
cairo-debugsource - addressed in versions 1.15.2-25.6.2, 1.16.0-150200.5.5.1, 1.16.0-150400.11.3.1
libcairo-gobject2 - addressed in versions 1.15.2-25.6.2, 1.16.0-150200.5.5.1, 1.16.0-150400.11.3.1
libcairo-script-interpreter2 - addressed in versions 1.15.2-25.6.2, 1.16.0-150400.11.3.1
libcairo2 - addressed in versions 1.15.2-25.6.2, 1.16.0-150200.5.5.1, 1.16.0-150400.11.3.1
libcairo-gobject2-debuginfo - addressed in versions 1.15.2-25.6.2, 1.16.0-150200.5.5.1, 1.16.0-150400.11.3.1
cairo-devel - update to 1.15.14-6
cairo - update to 1.15.14-6
cairo-debuginfo - update to 1.15.14-6
cairo-debugsource - update to 1.15.14-6
cairo-devel-64bit - update to 1.16.0-150400.11.3.1
libcairo-script-interpreter2-64bit - update to 1.16.0-150400.11.3.1
libcairo-script-interpreter2-64bit-debuginfo - update to 1.16.0-150400.11.3.1
libcairo-gobject2-32bit-debuginfo - update to 1.16.0-150400.11.3.1
cairo-tools - update to 1.16.0-150400.11.3.1
cairo-tools-debuginfo - update to 1.16.0-150400.11.3.1
libcairo2-64bit-debuginfo - update to 1.16.0-150400.11.3.1
libcairo2-32bit-debuginfo - update to 1.16.0-150400.11.3.1
libcairo-script-interpreter2-32bit - update to 1.16.0-150400.11.3.1
cairo-devel-32bit - update to 1.16.0-150400.11.3.1
libcairo-script-interpreter2-32bit-debuginfo - update to 1.16.0-150400.11.3.1
libcairo-gobject2-64bit-debuginfo - update to 1.16.0-150400.11.3.1
libcairo-gobject2-64bit - update to 1.16.0-150400.11.3.1
libcairo2-64bit - update to 1.16.0-150400.11.3.1
x11-libs/cairo - update to 1.18.0

• https://github.com/TeamSeri0us/pocs/tree/master/gerbv
• https://gitlab.freedesktop.org/cairo/cairo/issues/353

• Denial of service in Cairo
• Ubuntu update for cairo
• SUSE update for cairo
• openEuler 20.03 LTS update for cairo
• SUSE update for cairo
• SUSE update for cairo
• Gentoo update for Cairo
• SUSE update for cairo
• SUSE update for cairo
• Ubuntu update for cairo