[ GLSA 202003-41 ] GNU FriBidi

[GLSA]

Gentoo Linux Security Advisory

Title: GNU FriBidi: Heap-based buffer overflow (GLSA 202003-41)
Severity: normal
Exploitable: local, remote
Date: 2020-03-19
Bug(s): #699338
ID: 202003-41

Synopsis

A heap-based buffer overflow in GNU FriBidi might allow remote
attackers to execute arbitrary code.


Background

The Free Implementation of the Unicode Bidirectional Algorithm.

Affected Packages

Package: dev-libs/fribidi
Vulnerable: < 1.0.8
Unaffected: >= 1.0.8
Architectures: All supported architectures


Description

A heap-based buffer overflow vulnerability was found in GNU FriBidi.

Impact

A remote attacker could possibly cause a memory corruption, execute
arbitrary code with the privileges of the process or cause a Denial of
Service condition.


Workaround

There is no known workaround at this time.

Resolution

All FriBidi users should upgrade to the latest version: