VDB
BDU%3A2019-02871
BDU%3A2019-02871
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции pango_log2vis_get_embedding_levels библиотеки Pango, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Fedora Project, Canonical Ltd., The GNOME Project, Сообщество свободного программного обеспечения, Oracle Corp., АО «НТЦ ИТ РОСА» | Red Hat Enterprise Linux, Fedora, Ubuntu, Pango, Debian GNU/Linux, Oracle SD-WAN Edge, ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308) |
Timeline
- Aug 13, 2019 CVE Published
- Mar 19, 2025 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
References
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-1010238.html?_ga=2.239943491.1132720850.1565355394-9757324.1561458966 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-1010238?cpeVersion=2.2 url
- https://usn.ubuntu.com/4081-1/ url
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010238 url
- https://gitlab.gnome.org/GNOME/pango/blob/master/pango/pango-bidi-type.c url
- https://tools.cisco.com/security/center/viewAlert.x?alertId=60522 url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2687 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6HWAHXJ2ZXINYMANHPFDDCJFWUQ57M4/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VFFF4FY7SCAYT3EKTYPGRN6BVKZTH7Y7/ advisory
- https://www.debian.org/security/2019/dsa-4496 advisory
- https://access.redhat.com/security/cve/CVE-2019-1010238 advisory