PT-2022-19686 · Gnome+3 · Gnome Epiphany+3

Michael Catanzaro · Published 2022-04-20 · Updated 2024-06-15 · CVE-2022-29536

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNOME Epiphany versions prior to 41.4 GNOME Epiphany versions 42.x prior to 42.2

Description The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered, allowing an HTML document to trigger a client buffer overflow via a long page title. This happens in the ephy string shorten function within the UI process.

Recommendations For GNOME Epiphany versions prior to 41.4, update to version 41.4 or later. For GNOME Epiphany versions 42.x prior to 42.2, update to version 42.2 or later. As a temporary workaround, consider restricting the use of long page titles until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2022-1741

CVE-2022-29536

DLA-3074-1

DSA-5208-1

MGASA-2022-0382

OESA-2022-1627

OPENSUSE-SU-2024:12025-1

USN-5561-1

Affected Products

Alt Linux

Gnome Epiphany

Linuxmint

Ubuntu

References · 36

• https://ubuntu.com/security/CVE-2022-29536 · Vendor Advisory
• https://debian.org/security/2022/dsa-5208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45088 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-29536 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5K5UPNHVWXDPSMBNSB2645MD2N5CXQS · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12025-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0382.html · Security Note
• https://ubuntu.com/security/CVE-2021-45087 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLLDMY4JYDZTMZSCPSY23K5YW3SQYUR6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45086 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5208-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-29536 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5561-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/GLLDMY4JYDZTMZSCPSY23K5YW3SQYUR6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29536 · Security Note