CVE-2022-25308
Summary
| CVE | CVE-2022-25308 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-06 18:15:00 UTC |
| Updated | 2023-02-12 22:15:00 UTC |
| Description | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Fix the stack buffer overflow issue by tagoh · Pull Request #184 · fribidi/fribidi · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| stack-buffer-overflow on address 0x7ffda2c0112f at pc 0x5580929d7ab5 bp 0x7ffda2bc1820 sp 0x7ffda2bc1810 · Issue #181 · fribidi/fribidi · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2047890 – (CVE-2022-25308) CVE-2022-25308 fribidi: Stack based buffer overflow |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160240 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-7514)
- 160304 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-8011)
- 179191 Debian Security Update for fribidi (DLA 2974-1)
- 180828 Debian Security Update for fribidi (CVE-2022-25308)
- 198732 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-1)
- 198768 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-2)
- 199483 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5922-1)
- 240825 Red Hat Update for fribidi (RHSA-2022:7514)
- 240871 Red Hat Update for fribidi (RHSA-2022:8011)
- 282560 Fedora Security Update for mingw (FEDORA-2022-8c2af4ba24)
- 282561 Fedora Security Update for mingw (FEDORA-2022-56942dc7c5)
- 282563 Fedora Security Update for fribidi (FEDORA-2022-d230620a58)
- 282595 Fedora Security Update for fribidi (FEDORA-2022-764c8c6b1c)
- 354393 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-200
- 354444 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-091
- 355114 Amazon Linux Security Advisory for fribidi : ALAS2023-2023-069
- 355579 Amazon Linux Security Advisory for fribidi : ALAS2-2023-2116
- 502218 Alpine Linux Security Update for fribidi
- 503933 Alpine Linux Security Update for fribidi
- 672347 EulerOS Security Update for fribidi (EulerOS-SA-2022-2763)
- 672392 EulerOS Security Update for fribidi (EulerOS-SA-2022-2728)
- 672430 EulerOS Security Update for fribidi (EulerOS-SA-2022-2820)
- 672436 EulerOS Security Update for fribidi (EulerOS-SA-2022-2845)
- 752174 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1845-1)
- 752178 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1844-1)
- 752194 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1898-1)
- 752213 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:2029-1)
- 903836 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10854)
- 904157 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10854-1)
- 940763 AlmaLinux Security Update for fribidi (ALSA-2022:7514)
- 940825 AlmaLinux Security Update for fribidi (ALSA-2022:8011)
- 960210 Rocky Linux Security Update for fribidi (RLSA-2022:7514)
- 960602 Rocky Linux Security Update for fribidi (RLSA-2022:8011)