USN-5366-2

Dashboard / Vulnerabilities / USN-5366-2

USN-5366-2

Summary: fribidi vulnerabilities

Details: USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25308) It was discovered that FriBidi incorrectly validated input data to its CapRTL unicode encoder, resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25309) It was discovered that FriBidi incorrectly handled empty input when removing marks from unicode strings, resulting in a crash. An attacker could use this to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25310)

References: https://ubuntu.com/security/notices/USN-5366-2, https://ubuntu.com/security/CVE-2022-25308, https://ubuntu.com/security/CVE-2022-25309, https://ubuntu.com/security/CVE-2022-25310