PT-2018-10071 · Gnome+4 · Libgxps+4

Chenyuan · Published 2018-05-04 · Updated 2020-06-19 · CVE-2018-10733

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libgxps versions prior to 0.3.1

Description The issue is related to a heap-based buffer over-read in the ft font face hash function of gxps-fonts.c. This can be triggered by a crafted input, potentially leading to a remote denial of service attack.

Recommendations For versions prior to 0.3.1, update to version 0.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ft font face hash function until a patch is available.

Exploit

Fix

DoS

XSS

Out of bounds Read

Weakness Enumeration

CWE-79

CWE-125

Related Identifiers

ALT-PU-2019-1007

BDU:2019-04345

CESA-2018_3140

CVE-2018-10733

MGASA-2019-0003

OPENSUSE-SU-2019:1120-1

OPENSUSE-SU-2019_1120-1

RHSA-2018:3140

RHSA-2018_3140

SUSE-SU-2019:0720-1

SUSE-SU-2019_0720-1

SUSE-SU-2020:1687-1

SUSE-SU-2020_1687-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Libgxps

References · 686

• 🔥 https://github.com/Metnew/uxss-db/tree/master/webkit/CVE-2018-4204 · Exploit
• 🔥 https://github.com/mwrlabs/CVE-2018-4121 · Exploit
• 🔥 https://github.com/FSecureLABS/CVE-2018-4121 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1574844 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10767 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13988 · Security Note
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9381 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11712 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-16084 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UY53OSYKXQJ4PBBGTBJFU7FLVWGGFV4J · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-10733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4200 · Security Note