A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.

The version of AOS installed on the remote host is prior to 5.16.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.16.0.1 advisory.

  - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated     the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
    (CVE-2019-5544)

  - Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly     sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8. (CVE-2019-11729)

  - When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-11745)

  - An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an
    __blk_drain_queue() use-after-free because a certain error case is mishandled. (CVE-2018-20856)

  - A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function     in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other     consequences. (CVE-2019-10126)

  - A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the     mwifiex kernel module while connecting to a malicious wireless network. (CVE-2019-3846)

  - The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key     length and does not prevent an attacker from influencing the key length negotiation. This allows practical     brute-force attacks (aka KNOB) that can decrypt traffic and inject arbitrary ciphertext without the     victim noticing. (CVE-2019-9506)

  - An information disclosure vulnerability exists when certain central processing units (CPU) speculatively     access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from     CVE-2019-1071, CVE-2019-1073. (CVE-2019-1125)

  - The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable     to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event     frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This     vulnerability can be exploited with compromised chipsets to compromise the host, or when used in     combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-     crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a     vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.
    (CVE-2019-9500)

  - Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R)     Processors may allow an authenticated user to potentially enable denial of service of the host system via     local access. (CVE-2018-12207)

  - Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th     Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold     Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900     Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2019-0154)

  - TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated     user to potentially enable information disclosure via a side channel with local access. (CVE-2019-11135)

  - A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost     functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A     privileged guest user able to pass descriptors with invalid length to the host when migration is underway,     could use this flaw to increase their privileges on the host. (CVE-2019-14835)

  - Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th     Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold     Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900     Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R)     Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077     (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11,     4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of     privilege via local access. (CVE-2019-0155)

  - A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as     sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged     instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges     inside guest. (CVE-2018-10853)

  - The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an     integer overflow via a large relative timeout because ktime_add_safe is not used. (CVE-2018-13053)

  - An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer     dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted     xfs image. This occurs because of a lack of proper validation that cached inodes are free during     allocation. (CVE-2018-13093)

  - An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may     occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp. (CVE-2018-13094)

  - An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of     service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is     in extent format, but has more extents than fit in the inode fork. (CVE-2018-13095)

  - A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-     memory from within a vm guest. A race condition between connect() and close() function may allow an     attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt     AF_VSOCK messages destined to other clients. (CVE-2018-14625)

  - drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a     certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial     of service (use-after-free). (CVE-2018-14734)

  - arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which     makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests. (CVE-2018-15594)

  - An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status     in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from     unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940. (CVE-2018-16658)

  - A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar     functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in     certain cases causing a memory access fault and a system halt by accessing invalid memory address. This     issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7. (CVE-2018-16885)

  - Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks.
    If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of     mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it     has been released back to the page allocator and reused. This is fixed in the following kernel versions:
    4.9.135, 4.14.78, 4.18.16, 4.19. (CVE-2018-18281)

  - An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel     through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM     ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the     location of kernel code and data and bypass kernel security protections such as KASLR. (CVE-2018-7755)

  - Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux     kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering     an out-of-array error case. (CVE-2018-8087)

  - In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds     write with no additional execution privileges needed. User interaction is not needed for exploitation.
    Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
    (CVE-2018-9363)

  - In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a     missing bounds check. This could lead to local escalation of privilege with System execution privileges     needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android     ID: A-71361580. (CVE-2018-9516)

  - In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local     escalation of privilege with System execution privileges needed. User interaction is not needed for     exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931. (CVE-2018-9517)

  - The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to     prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive     information, cause a denial of service, or possibly have unspecified other impact by triggering a race     condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c,     fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. (CVE-2019-11599)

  - An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when     megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c.
    This causes a Denial of Service, related to a use-after-free. (CVE-2019-11810)

  - fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the     extent tree block, which might allow local users to obtain sensitive information by reading uninitialized     data in the filesystem. (CVE-2019-11833)

  - A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before     5.1-rc1. (CVE-2019-3459)

  - A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel     before 5.1-rc1. (CVE-2019-3460)

  - A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's     locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is     administratively granted ownership of the device, it may cause a system memory exhaustion and thus a     denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable. (CVE-2019-3882)

  - An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including     v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster     than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the     vhost_net kernel thread, resulting in a DoS scenario. (CVE-2019-3900)

  - The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers     to observe page cache access patterns of other processes on the same system, potentially allowing sniffing     of secret information. (Fixing this affects the output of the fincore program.) Limited remote     exploitation may be possible, as demonstrated by latency differences in accessing public files from an     Apache HTTP Server. (CVE-2019-5489)

  - The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. (CVE-2019-7222)

  - A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU     FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code     by delivering crafted text content to a user, when this content is then rendered by an application that     uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses     Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the     attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in     HexChat. (CVE-2019-18397)

  - An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux     kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer     'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be     supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm'     device could use this flaw to crash the host kernel, resulting in a denial of service or potentially     escalating privileges on the system. (CVE-2019-14821)

  - In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12,     was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was     potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by     adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple     use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation.
    NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or     4.14.x longterm kernels before 4.14.139. (CVE-2019-15239)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1655-1 advisory.

  - A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU     FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code     by delivering crafted text content to a user, when this content is then rendered by an application that     uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses     Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the     attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in     HexChat. (CVE-2019-18397)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for fribidi fixes the following issues :

Security issues fixed :

  - CVE-2019-18397: Avoid buffer overflow. (bsc#1156260)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for fribidi fixes the following issues :

Security issues fixed :

CVE-2019-18397: Avoid buffer overflow. (bsc#1156260)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:4361 advisory.

  - fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial     of service and possible code execution (CVE-2019-18397)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of fribidi installed on the remote host is prior to 1.0.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1434 advisory.

    A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU     FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code     by delivering crafted text content to a user, when this content is then rendered by an application that     uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses     Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the     attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in     HexChat. (CVE-2019-18397)



Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the fribidi package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A buffer overflow in the     fribidi_get_par_embedding_levels_ex() function in     lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows     an attacker to cause a denial of service or possibly     execute arbitrary code by delivering crafted text     content to a user, when this content is then rendered     by an application that uses FriBidi for text layout     calculations. Examples include any GNOME or GTK+ based     application that uses Pango for text layout, as this     internally uses FriBidi for bidirectional text layout.
    For example, the attacker can construct a crafted text     file to be opened in GEdit, or a crafted IRC message to     be viewed in HexChat.(CVE-2019-18397)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202003-41 (GNU FriBidi: Heap-based buffer overflow)

    A heap-based buffer overflow vulnerability was found in GNU FriBidi.
  Impact :

    A remote attacker could possibly cause a memory corruption, execute       arbitrary code with the privileges of the process or cause a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

According to the version of the fribidi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A buffer overflow in the     fribidi_get_par_embedding_levels_ex() function in     lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows     an attacker to cause a denial of service or possibly     execute arbitrary code by delivering crafted text     content to a user, when this content is then rendered     by an application that uses FriBidi for text layout     calculations. Examples include any GNOME or GTK+ based     application that uses Pango for text layout, as this     internally uses FriBidi for bidirectional text layout.
    For example, the attacker can construct a crafted text     file to be opened in GEdit, or a crafted IRC message to     be viewed in HexChat.(CVE-2019-18397)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0291 advisory.

    A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the     proper way, while the text data itself is always written in logical order.

    Security Fix(es):

    * fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to     denial of service and possible code execution (CVE-2019-18397)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has fribidi packages installed that are affected by a vulnerability:

  - A buffer overflow in the     fribidi_get_par_embedding_levels_ex() function in     lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows     an attacker to cause a denial of service or possibly     execute arbitrary code by delivering crafted text     content to a user, when this content is then rendered by     an application that uses FriBidi for text layout     calculations. Examples include any GNOME or GTK+ based     application that uses Pango for text layout, as this     internally uses FriBidi for bidirectional text layout.
    For example, the attacker can construct a crafted text     file to be opened in GEdit, or a crafted IRC message to     be viewed in HexChat. (CVE-2019-18397)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has fribidi packages installed that are affected by a vulnerability:

  - A buffer overflow in the     fribidi_get_par_embedding_levels_ex() function in     lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows     an attacker to cause a denial of service or possibly     execute arbitrary code by delivering crafted text     content to a user, when this content is then rendered by     an application that uses FriBidi for text layout     calculations. Examples include any GNOME or GTK+ based     application that uses Pango for text layout, as this     internally uses FriBidi for bidirectional text layout.
    For example, the attacker can construct a crafted text     file to be opened in GEdit, or a crafted IRC message to     be viewed in HexChat. (CVE-2019-18397)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4361 advisory.

    [1.0.4-7]
    - Security fix for CVE-2019-18397       Resolves: rhbz#1781226

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for fribidi is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es) :

* fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/ fribidi-bidi.c leading to denial of service and possible code execution (CVE-2019-18397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4361 advisory.

    A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the     proper way, while the text data itself is always written in logical order.

    Security Fix(es):

    * fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to     denial of service and possible code execution (CVE-2019-18397)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4326 advisory.

    [1.0.2-1.1]
    - Security fix for CVE-2019-18397       Resolves: rhbz#1781224

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - fribidi: buffer overflow in     fribidi_get_par_embedding_levels_ex() in lib     /fribidi-bidi.c leading to denial of service and     possible code execution (CVE-2019-18397)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4326 advisory.

    A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the     proper way, while the text data itself is always written in logical order.

    Security Fix(es):

    * fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to     denial of service and possible code execution (CVE-2019-18397)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2019-18397

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Alex Murray discovered a stack-based buffer overflow when handling a large number of unicode isolate directives. An attacker could use this to cause a denial of service or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Alex Murray discovered a stack-based buffer overflow vulnerability in fribidi, an implementation of the Unicode Bidirectional Algorithm algorithm, which could result in denial of service or potentially the execution of arbitrary code, when processing a large number of unicode isolate directional characters.

ID	Name	Product	Family	Severity
164695	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.1)	Nessus	Misc.	critical
164602	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.3)	Nessus	Misc.	critical
164593	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.0.1)	Nessus	Misc.	critical
164561	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17)	Nessus	Misc.	critical
151704	openSUSE 15 Security Update : fribidi (openSUSE-SU-2021:1655-1)	Nessus	SuSE Local Security Checks	high
149896	openSUSE Security Update : fribidi (openSUSE-2021-763)	Nessus	SuSE Local Security Checks	high
149797	SUSE SLED15 / SLES15 Security Update : fribidi (SUSE-SU-2021:1655-1)	Nessus	SuSE Local Security Checks	high
145584	CentOS 8 : fribidi (CESA-2019:4361)	Nessus	CentOS Local Security Checks	high
137091	Amazon Linux 2 : fribidi (ALAS-2020-1434)	Nessus	Amazon Linux Local Security Checks	high
135138	EulerOS Virtualization for ARM 64 3.0.6.0 : fribidi (EulerOS-SA-2020-1351)	Nessus	Huawei Local Security Checks	high
134727	GLSA-202003-41 : GNU FriBidi: Heap-based buffer overflow	Nessus	Gentoo Local Security Checks	high
133983	EulerOS 2.0 SP8 : fribidi (EulerOS-SA-2020-1149)	Nessus	Huawei Local Security Checks	high
133383	RHEL 8 : fribidi (RHSA-2020:0291)	Nessus	Red Hat Local Security Checks	high
133074	NewStart CGSL CORE 5.05 / MAIN 5.05 : fribidi Vulnerability (NS-SA-2020-0006)	Nessus	NewStart CGSL Local Security Checks	high
132489	NewStart CGSL CORE 5.04 / MAIN 5.04 : fribidi Vulnerability (NS-SA-2019-0264)	Nessus	NewStart CGSL Local Security Checks	high
132412	Oracle Linux 8 : fribidi (ELSA-2019-4361)	Nessus	Oracle Linux Local Security Checks	high
132405	CentOS 7 : fribidi (CESA-2019:4326)	Nessus	CentOS Local Security Checks	high
132393	RHEL 8 : fribidi (RHSA-2019:4361)	Nessus	Red Hat Local Security Checks	high
132380	Oracle Linux 7 : fribidi (ELSA-2019-4326)	Nessus	Oracle Linux Local Security Checks	high
132332	Scientific Linux Security Update : fribidi on SL7.x x86_64 (20191219)	Nessus	Scientific Linux Local Security Checks	high
132330	RHEL 7 : fribidi (RHSA-2019:4326)	Nessus	Red Hat Local Security Checks	high
132327	Fedora 30 : fribidi (2019-533a72fec5)	Nessus	Fedora Local Security Checks	high
132114	Fedora 31 : fribidi (2019-7075bc4ff8)	Nessus	Fedora Local Security Checks	high
130757	Ubuntu 19.04 / 19.10 : fribidi vulnerability (USN-4179-1)	Nessus	Ubuntu Local Security Checks	high
130631	Debian DSA-4561-1 : fribidi - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2019-18397

high

Tenable Plugins

critical

critical

critical

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high