CVE-2018-10733

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.26%

Published

May 4, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.

Weaknesses (CWE)

CWE-125

Affected Products (6)

gnome · libgxpsvulnerable

redhat · ansible_towervulnerable

redhat · enterprise_linux_desktopvulnerable

redhat · enterprise_linux_servervulnerable

redhat · enterprise_linux_workstationvulnerable

opensuse · leapvulnerable

References (10)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.html

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHBA-2019:0327

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3140

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3505

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1574844

ExploitIssue TrackingPatch

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.html

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHBA-2019:0327

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3140

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3505

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1574844

ExploitIssue TrackingPatch

KEV Catalog EPSS Scores Vendors All CVEs