CVE-2022-25309
Summary
| CVE | CVE-2022-25309 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-09-06 18:15:00 UTC |
|---|
| Updated | 2023-02-12 22:15:00 UTC |
|---|
| Description | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Protected against garbage in the CapRTL encoder · fribidi/fribidi@f22593b · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| heap-buffer-overflow (/home/lin/fribidi/bin/fribidi+0x108fe) in fribidi_cap_rtl_to_unicode · Issue #182 · fribidi/fribidi · GitHub |
MISC |
github.com |
|
| 2047896 – (CVE-2022-25309) CVE-2022-25309 fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160240 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-7514)
- 160304 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-8011)
- 179191 Debian Security Update for fribidi (DLA 2974-1)
- 180868 Debian Security Update for fribidi (CVE-2022-25309)
- 198732 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-1)
- 198768 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-2)
- 199483 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5922-1)
- 240825 Red Hat Update for fribidi (RHSA-2022:7514)
- 240871 Red Hat Update for fribidi (RHSA-2022:8011)
- 282560 Fedora Security Update for mingw (FEDORA-2022-8c2af4ba24)
- 282561 Fedora Security Update for mingw (FEDORA-2022-56942dc7c5)
- 282563 Fedora Security Update for fribidi (FEDORA-2022-d230620a58)
- 282595 Fedora Security Update for fribidi (FEDORA-2022-764c8c6b1c)
- 354393 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-200
- 354444 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-091
- 355114 Amazon Linux Security Advisory for fribidi : ALAS2023-2023-069
- 355326 Amazon Linux Security Advisory for fribidi : ALAS2-2023-2054
- 502218 Alpine Linux Security Update for fribidi
- 503933 Alpine Linux Security Update for fribidi
- 672347 EulerOS Security Update for fribidi (EulerOS-SA-2022-2763)
- 672392 EulerOS Security Update for fribidi (EulerOS-SA-2022-2728)
- 672430 EulerOS Security Update for fribidi (EulerOS-SA-2022-2820)
- 672436 EulerOS Security Update for fribidi (EulerOS-SA-2022-2845)
- 752174 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1845-1)
- 752178 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1844-1)
- 752194 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1898-1)
- 752213 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:2029-1)
- 903872 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10887)
- 904166 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10887-1)
- 940763 AlmaLinux Security Update for fribidi (ALSA-2022:7514)
- 940825 AlmaLinux Security Update for fribidi (ALSA-2022:8011)
- 960210 Rocky Linux Security Update for fribidi (RLSA-2022:7514)
- 960602 Rocky Linux Security Update for fribidi (RLSA-2022:8011)
