CVE-2022-25310
Summary
| CVE | CVE-2022-25310 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-09-06 18:15:00 UTC |
|---|
| Updated | 2023-06-23 17:50:00 UTC |
|---|
| Description | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| SEGV on unknown address 0x000000000000 (pc 0x55cc8b6086a6 bp 0x7ffed6538790 sp 0x7ffed6538740 T0) · Issue #183 · fribidi/fribidi · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2047923 – (CVE-2022-25310) CVE-2022-25310 fribidi: SEGV in fribidi_remove_bidi_marks |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Fix SEGV issue in fribidi_remove_bidi_marks by tagoh · Pull Request #186 · fribidi/fribidi · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160240 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-7514)
- 160304 Oracle Enterprise Linux Security Update for fribidi (ELSA-2022-8011)
- 179191 Debian Security Update for fribidi (DLA 2974-1)
- 180879 Debian Security Update for fribidi (CVE-2022-25310)
- 198732 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-1)
- 198768 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5366-2)
- 199483 Ubuntu Security Notification for FriBidi Vulnerabilities (USN-5922-1)
- 240825 Red Hat Update for fribidi (RHSA-2022:7514)
- 240871 Red Hat Update for fribidi (RHSA-2022:8011)
- 282560 Fedora Security Update for mingw (FEDORA-2022-8c2af4ba24)
- 282561 Fedora Security Update for mingw (FEDORA-2022-56942dc7c5)
- 282563 Fedora Security Update for fribidi (FEDORA-2022-d230620a58)
- 282595 Fedora Security Update for fribidi (FEDORA-2022-764c8c6b1c)
- 354393 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-200
- 354444 Amazon Linux Security Advisory for fribidi : ALAS2022-2022-091
- 355114 Amazon Linux Security Advisory for fribidi : ALAS2023-2023-069
- 355579 Amazon Linux Security Advisory for fribidi : ALAS2-2023-2116
- 502218 Alpine Linux Security Update for fribidi
- 503933 Alpine Linux Security Update for fribidi
- 672347 EulerOS Security Update for fribidi (EulerOS-SA-2022-2763)
- 672392 EulerOS Security Update for fribidi (EulerOS-SA-2022-2728)
- 672430 EulerOS Security Update for fribidi (EulerOS-SA-2022-2820)
- 672436 EulerOS Security Update for fribidi (EulerOS-SA-2022-2845)
- 752174 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1845-1)
- 752178 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1844-1)
- 752194 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:1898-1)
- 752213 SUSE Enterprise Linux Security Update for fribidi (SUSE-SU-2022:2029-1)
- 903796 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10888)
- 904161 Common Base Linux Mariner (CBL-Mariner) Security Update for fribidi (10888-1)
- 940763 AlmaLinux Security Update for fribidi (ALSA-2022:7514)
- 940825 AlmaLinux Security Update for fribidi (ALSA-2022:8011)
- 960210 Rocky Linux Security Update for fribidi (RLSA-2022:7514)
- 960602 Rocky Linux Security Update for fribidi (RLSA-2022:8011)
