Published: 04/05/2018 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps up to and including 0.3.0. A crafted input will lead to a remote denial of service attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome libgxps
redhat enterprise linux server 7.0
redhat ansible tower 3.3
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
opensuse leap 15.0

Debian Bug report logs - #897954 libgxps: CVE-2018-10733: Heap Buffer Overflow in ft_font_face_hash of gxps-fontsc Package: src:libgxps; Maintainer for src:libgxps is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 May 2018 ...

Synopsis Moderate: GNOME security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) ba ...

Synopsis Critical: Red Hat Ansible Tower 331-2 Release - Container Image Type/Severity Security Advisory: Critical Topic Security Advisory Description Red Hat Ansible Tower 331 is now available and contains the following bug fixes: Fixed event callback error when in-line vaulted variabl ...

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fontsc in libgxps through 030 A crafted input will lead to a remote denial of service attack ...

CWE-125 https://bugzilla.redhat.com/show_bug.cgi?id=1574844 https://access.redhat.com/errata/RHSA-2018:3140 https://access.redhat.com/errata/RHSA-2018:3505 http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.html https://access.redhat.com/errata/RHBA-2019:0327 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=897954 https://nvd.nist.gov

CVE-2018-10733

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect