6.5

CVE-2018-15120

Exploit
libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Pango Version >= 1.40.8 <= 1.42.3
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.5% 0.955
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://52.117.224.77/xfce4-pdos.webm
Third Party Advisory
Exploit
https://github.com/GNOME/pango/blob/1.42.4/NEWS
Third Party Advisory
Release Notes
https://github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f
Patch
Third Party Advisory
https://i.redd.it/v7p4n2ptu0s11.jpg
Third Party Advisory
https://mail.gnome.org/archives/distributor-list/2018-August/msg00001.html
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201811-07
Third Party Advisory
https://usn.ubuntu.com/3750-1/
Third Party Advisory
https://www.exploit-db.com/exploits/45263
Patch
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45263/
Patch
Third Party Advisory
Exploit
VDB Entry
https://www.ign.com/articles/2018/10/16/ps4s-are-reportedly-being-bricked-and-sony-is-working-on-a-fix
Third Party Advisory
Exploit
https://www.reddit.com/r/PS4/comments/9o5efg/message_bricking_console_megathread/
Third Party Advisory