CVE-2019-1010238 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-1010238 Interim 1 27 2023-01-19T01:30:30Z current 2021-05-30T14:34:46Z 2023-01-19T01:30:30Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-1010238 Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libpango-1_0-0 libpango-1_0-0-32bit pango pango-devel pango-modules pango-modules-32bit typelib-1_0-Pango-1_0 pango as a component of SLES for SAP Applications 11 SP3 libpango-1_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Desktop 12 SP3 pango as a component of SUSE Linux Enterprise Desktop 12 SP3 libpango-1_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP4 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Desktop 12 SP4 pango as a component of SUSE Linux Enterprise Desktop 12 SP4 pango as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 libpango-1_0-0 as a component of SUSE Linux Enterprise Module for Basesystem 15 pango-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Module for Basesystem 15 pango as a component of SUSE Linux Enterprise Module for Basesystem 15 libpango-1_0-0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pango-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 pango as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Module for Desktop Applications 15 pango as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 pango as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 pango as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata pango as a component of SUSE Linux Enterprise Server 11 SP3 LTSS pango as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata pango as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libpango-1_0-0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS pango-modules as a component of SUSE Linux Enterprise Server 12 SP1-LTSS pango-modules-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS pango as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpango-1_0-0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS pango as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpango-1_0-0 as a component of SUSE Linux Enterprise Server 12 SP3 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server 12 SP3 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server 12 SP3 pango as a component of SUSE Linux Enterprise Server 12 SP3 libpango-1_0-0 as a component of SUSE Linux Enterprise Server 12 SP4 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server 12 SP4 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server 12 SP4 pango as a component of SUSE Linux Enterprise Server 12 SP4 libpango-1_0-0 as a component of SUSE Linux Enterprise Server 12-LTSS libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server 12-LTSS pango-modules as a component of SUSE Linux Enterprise Server 12-LTSS pango-modules-32bit as a component of SUSE Linux Enterprise Server 12-LTSS typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server 12-LTSS pango as a component of SUSE Linux Enterprise Server 12-LTSS pango as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpango-1_0-0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 pango as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpango-1_0-0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 pango as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpango-1_0-0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libpango-1_0-0-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 typelib-1_0-Pango-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 pango as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 pango-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 pango as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 pango-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 pango as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize. CVE-2019-1010238 SLES for SAP Applications 11 SP3:pango SUSE Linux Enterprise Desktop 12 SP3:libpango-1_0-0 SUSE Linux Enterprise Desktop 12 SP3:libpango-1_0-0-32bit SUSE Linux Enterprise Desktop 12 SP3:pango SUSE Linux Enterprise Desktop 12 SP3:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Desktop 12 SP4:libpango-1_0-0 SUSE Linux Enterprise Desktop 12 SP4:libpango-1_0-0-32bit SUSE Linux Enterprise Desktop 12 SP4:pango SUSE Linux Enterprise Desktop 12 SP4:typelib-1_0-Pango-1_0 SUSE Linux Enterprise High Performance Computing 12 SP4:pango SUSE Linux Enterprise Module for Basesystem 15 SP1:libpango-1_0-0 SUSE Linux Enterprise Module for Basesystem 15 SP1:pango SUSE Linux Enterprise Module for Basesystem 15 SP1:pango-devel SUSE Linux Enterprise Module for Basesystem 15 SP1:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Module for Basesystem 15:libpango-1_0-0 SUSE Linux Enterprise Module for Basesystem 15:pango SUSE Linux Enterprise Module for Basesystem 15:pango-devel SUSE Linux Enterprise Module for Basesystem 15:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libpango-1_0-0-32bit SUSE Linux Enterprise Module for Desktop Applications 15 SP1:pango SUSE Linux Enterprise Module for Desktop Applications 15:libpango-1_0-0-32bit SUSE Linux Enterprise Module for Desktop Applications 15:pango SUSE Linux Enterprise Server 11 SP1 for Teradata:pango SUSE Linux Enterprise Server 11 SP3 LTSS:pango SUSE Linux Enterprise Server 11 SP3 for Teradata:pango SUSE Linux Enterprise Server 11 SP4 LTSS:pango SUSE Linux Enterprise Server 12 SP1-LTSS:libpango-1_0-0 SUSE Linux Enterprise Server 12 SP1-LTSS:libpango-1_0-0-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:pango SUSE Linux Enterprise Server 12 SP1-LTSS:pango-modules SUSE Linux Enterprise Server 12 SP1-LTSS:pango-modules-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server 12 SP2-LTSS:libpango-1_0-0 SUSE Linux Enterprise Server 12 SP2-LTSS:libpango-1_0-0-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:pango SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server 12 SP3:libpango-1_0-0 SUSE Linux Enterprise Server 12 SP3:libpango-1_0-0-32bit SUSE Linux Enterprise Server 12 SP3:pango SUSE Linux Enterprise Server 12 SP3:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server 12 SP4:libpango-1_0-0 SUSE Linux Enterprise Server 12 SP4:libpango-1_0-0-32bit SUSE Linux Enterprise Server 12 SP4:pango SUSE Linux Enterprise Server 12 SP4:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server 12-LTSS:libpango-1_0-0 SUSE Linux Enterprise Server 12-LTSS:libpango-1_0-0-32bit SUSE Linux Enterprise Server 12-LTSS:pango SUSE Linux Enterprise Server 12-LTSS:pango-modules SUSE Linux Enterprise Server 12-LTSS:pango-modules-32bit SUSE Linux Enterprise Server 12-LTSS:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpango-1_0-0 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpango-1_0-0-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:pango SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpango-1_0-0 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpango-1_0-0-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP3:pango SUSE Linux Enterprise Server for SAP Applications 12 SP3:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libpango-1_0-0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libpango-1_0-0-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:pango SUSE Linux Enterprise Server for SAP Applications 12 SP4:typelib-1_0-Pango-1_0 SUSE Linux Enterprise Server for SAP Applications 12:pango SUSE Linux Enterprise Software Development Kit 12 SP3:pango SUSE Linux Enterprise Software Development Kit 12 SP3:pango-devel SUSE Linux Enterprise Software Development Kit 12 SP4:pango SUSE Linux Enterprise Software Development Kit 12 SP4:pango-devel important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H