Buffer overflow in Pango - CVE-2019-1010238

Vulnerability identifier: #VU19591

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-1010238

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing utf-8 strings in the pango_log2vis_get_embedding_levels() function in pango-bidi-type.c. A remote attacker can pass a specially crafted string to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Pango
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for x86_64
Fedora
pango1.0 (Ubuntu package)
pango1.0 (Debian package)
pango (Alpine package)
pango
Oracle SD-WAN Edge
WordPress Gallery Plugin - NextGEN Gallery

Install update from vendor's website.

pango1.0 (Ubuntu package) - update to 1.42.4-6ubuntu0.1
pango1.0 (Debian package) - update to 1.42.4-7~deb10u1
pango (Alpine package) - addressed in versions 1.42.4-r1, 1.44.5-r0
pango - addressed in versions 1.42.4-3.fc29, 1.43.0-4.fc30
WordPress Gallery Plugin - NextGEN Gallery - update to 2.1.56

• https://gitlab.gnome.org/GNOME/pango/blob/master/pango/pango-bidi-type.c

• Remote code execution in Pango
• Ubuntu update for Pango
• Debian update for pango1.0
• Red Hat update for pango
• Red Hat update for pango
• Gentoo update for Pango
• Red Hat update for pango
• Multiple vulnerabilities in Oracle SD-WAN Edge
• Buffer overflow in pango (Alpine package)
• Fedora 30 update for pango
• Fedora 29 update for pango