A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-25308 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2047890 | Issue Tracking Third Party Advisory |
| https://github.com/fribidi/fribidi/issues/181 | Exploit Patch Third Party Advisory |
| https://github.com/fribidi/fribidi/pull/184 | Exploit Third Party Advisory |
Configurations
History
12 Feb 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-121 |
02 Feb 2023, 21:22
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Sep 2022, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/fribidi/fribidi/issues/181 - Exploit, Patch, Third Party Advisory | |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2022-25308 - Third Party Advisory | |
| References | (MISC) https://github.com/fribidi/fribidi/pull/184 - Exploit, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2047890 - Issue Tracking, Third Party Advisory | |
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:gnu:fribidi:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
|
| First Time |
Redhat
Gnu Gnu fribidi Redhat enterprise Linux |
06 Sep 2022, 18:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-06 18:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-25308
Mitre link : CVE-2022-25308
CVE.ORG link : CVE-2022-25308
JSON object : View
Products Affected
redhat
- enterprise_linux
gnu
- fribidi