A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-25308 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2047890 | Issue Tracking Third Party Advisory |
| https://github.com/fribidi/fribidi/issues/181 | Exploit Patch Third Party Advisory |
| https://github.com/fribidi/fribidi/pull/184 | Exploit Third Party Advisory |
Configurations
History
08 Sep 2022, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:gnu:fribidi:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
| References | (MISC) https://github.com/fribidi/fribidi/pull/184 - Exploit, Third Party Advisory | |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2022-25308 - Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2047890 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://github.com/fribidi/fribidi/issues/181 - Exploit, Patch, Third Party Advisory |
06 Sep 2022, 18:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-06 18:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-25308
Mitre link : CVE-2022-25308
CVE.ORG link : CVE-2022-25308
JSON object : View
Products Affected
redhat
- enterprise_linux
gnu
- fribidi