CVE-2018-15120
Fixed in a distro release EPSS 11%
libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
Products: gnome pango, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.7 | pango | 1.40.14-r1 |
| Alpine 3.8 | pango | 1.40.14-r1 |
| Debian 12 | pango1.0 | 1.42.4-1 |
| Debian 13 | pango1.0 | 1.42.4-1 |
| Debian 14 | pango1.0 | 1.42.4-1 |
| SUSE Linux Enterprise Module for Basesystem 15 | pango | 1.40.14-3.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | pango | 1.40.14-3.3.1 |
| Ubuntu 18.04 LTS | pango1.0 | 1.40.14-1ubuntu0.1 |
| openSUSE Tumbleweed | hexchat | 2.14.3-4.4 |