CVE-2016-5384 fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache...
HighCVSS 7.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/fontconfig(Debian:12) | < 2.11.0-6.5 | 2.11.0-6.5 |
| debian/fontconfig(Debian:13) | < 2.11.0-6.5 | 2.11.0-6.5 |
| debian/fontconfig(Debian:14) | < 2.11.0-6.5 | 2.11.0-6.5 |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fontconfig project fontconfig | < 2.12.1 | 2.12.1 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
References
- Debian Security Tracker CVE-2016-5384 vendor-advisory
- RHSA-2016:2601 third-party-advisory vendor-advisory
- DSA-3644 third-party-advisory vendor-advisory
- 92339 third-party-advisory vdb-entry
- USN-3063-1 third-party-advisory vendor-advisory
- cgit.freedesktop.org patch third-party-advisory
- FEDORA-2016-6802f2e52a vendor-advisory
- FEDORA-2016-e23ab56ce3 vendor-advisory
- [Fontconfig] 20160805 fontconfig: Branch 'master' - 3 commits mailing-list patch third-party-advisory
- bugs.debian.org issue-tracking