Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-19308

Опубликовано: 27 нояб. 2019
Источник: debian
EPSS Низкий

Описание

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
gnome-font-viewerfixed3.34.0-2package
gnome-sushifixed3.38.0-1package

Примечания

  • https://gitlab.gnome.org/GNOME/gnome-font-viewer/issues/17

  • https://gitlab.gnome.org/GNOME/gnome-font-viewer/commit/9661683379806e2bad6a52ce6dde776a33f4f981

  • https://gitlab.gnome.org/GNOME/sushi/-/commit/74e95963bd088b62f4f1de381c1e3ce45bbd5615

  • Crash in GUI tool, no security impact

EPSS

Процентиль: 52%
0.00286
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

CVSS3: 3.3
redhat
около 6 лет назад

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

CVSS3: 5.5
nvd
около 6 лет назад

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

github
больше 3 лет назад

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

EPSS

Процентиль: 52%
0.00286
Низкий