CVE-2019-19847 - libspiro: stack-based off-by-one buffer overflow in spiro_to_bpath0() in spiro.c

Back Back to CVE browser

HIGH

libspiro: stack-based off-by-one buffer overflow in spiro_to_bpath0() in spiro.c

Published Dec 17, 2019

8.1

HIGH

CVSS 3.1

EPSS 1.36%

Description

Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.

Affected products

Red Hat Enterprise Linux 6

libspiro

Not affected
Red Hat Enterprise Linux 7

libspiro

Not affected
Red Hat Enterprise Linux 8

libspiro

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	libspiro	Not affected	n/a
Red Hat Enterprise Linux 7	libspiro	Not affected	n/a
Red Hat Enterprise Linux 8	libspiro	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of libspiro as shipped with Red Hat Enterprise Linux 6, 7, and 8 as they did not include the vulnerable code. The vulnerable function was introduced in a newer version of the package.

Weaknesses (2)

CWE-193

CWE-787

Out-of-bounds Write

References (6)

https://access.redhat.com/security/cve/CVE-2019-19847
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1786740
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9443
Advisory
https://github.com/fontforge/libspiro/issues/21
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19847
https://www.cve.org/CVERecord?id=CVE-2019-19847

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-19847		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1786740		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9443		Advisory
https://github.com/fontforge/libspiro/issues/21		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19847
https://www.cve.org/CVERecord?id=CVE-2019-19847