Detections
Analytics
CentOS 5 : pango (CESA-2011:1326)
high Nessus Plugin ID 56249
Language:
Synopsis
The remote CentOS host is missing one or more security updates.Description
Updated pango packages that fix one security issue are now available for Red Hat Enterprise Linux 5.The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Pango is a library used for the layout and rendering of internationalized text.
A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping engine used in Pango. If a user loaded a specially crafted font file with an application that uses Pango, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3193)
Users of pango are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, you must restart your system or restart the X server for the update to take effect.
Solution
Update the affected pango packages.See Also
Plugin Details
Severity: High
ID: 56249
File Name: centos_RHSA-2011-1326.nasl
Version: 1.13
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 9/22/2011
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:pango-devel, p-cpe:/a:centos:centos:pango
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Patch Publication Date: 9/21/2011
Vulnerability Publication Date: 6/15/2012
Reference Information
CVE: CVE-2011-3193
RHSA: 2011:1326