CVE-2023-25193
CVE-2023-25193
This page contains facts from public vulnerability sources. Check the original advisory before updating.
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVSS 7.5 · High · EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
harfbuzz Debian:12
- Versions
- 10.0.1-1
- 10.1.0-1
- 10.1.0-2
- 10.2.0-1
- 10.2.0-2
- 11.4.5-1
- 11.5.0-1
- 12.1.0-1
- 12.2.0-1
- 12.3.0-1
- 12.3.0-2
- 12.3.0-3
- 12.3.0-4
- 12.3.1-1
- 12.3.2-1
- 12.3.2-2
- 6.0.0+dfsg-3
- 8.0.0-1
- 8.0.0-2
- 8.0.0-3
- 8.0.1-1
- 8.3.0-1
- 8.3.0-2
- 9.0.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
harfbuzz Debian:13
- Affected ranges
- ECOSYSTEM: < 8.0.0-1
Update to 8.0.0-1
harfbuzz Debian:14
- Affected ranges
- ECOSYSTEM: < 8.0.0-1
Update to 8.0.0-1
openjdk-9 Ubuntu:16.04:LTS
- Versions
- 9~b88-1
- 9~b101-2ubuntu2
- 9~b102-1
- 9~b113-0ubuntu1
- 9~b114-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
harfbuzz Ubuntu:18.04:LTS
- Versions
- 1.4.2-1
- 1.4.2-1build1
- 1.6.3-1build1
- 1.7.1-1
- 1.7.2-1
- 1.7.2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-lts Ubuntu:Pro:18.04:LTS
- Versions
- 9.0.4+12-2ubuntu4
- 9.0.4+12-4ubuntu1
- 10~46-4ubuntu1
- 10~46-5ubuntu1
- 10.0.1+10-1ubuntu2
- 10.0.1+10-3ubuntu1
- 10.0.2+13-1ubuntu0.18.04.1
- 10.0.2+13-1ubuntu0.18.04.2
- 10.0.2+13-1ubuntu0.18.04.3
- 10.0.2+13-1ubuntu0.18.04.4
- 11.0.2+9-3ubuntu1~18.04.3
- 11.0.3+7-1ubuntu2~18.04.1
- 11.0.4+11-1ubuntu2~18.04.3
- 11.0.5+10-0ubuntu1.1~18.04
- 11.0.6+10-1ubuntu1~18.04.1
- 11.0.7+10-2ubuntu2~18.04
- 11.0.8+10-0ubuntu1~18.04.1
- 11.0.9+11-0ubuntu1~18.04.1
- 11.0.9.1+1-0ubuntu1~18.04
- 11.0.10+9-0ubuntu1~18.04
- 11.0.11+9-0ubuntu2~18.04
- 11.0.13+8-0ubuntu1~18.04
- 11.0.14+9-0ubuntu2~18.04
- 11.0.14.1+1-0ubuntu1~18.04
- 11.0.15+10-0ubuntu0.18.04.1
- 11.0.16+8-0ubuntu1~18.04
- 11.0.17+8-1ubuntu2~18.04
- 11.0.18+10-0ubuntu1~18.04.1
- 11.0.19+7~us1-0ubuntu1~18.04.1
- Affected ranges
- ECOSYSTEM: < 11.0.20+8-1ubuntu1~18.04
Update to 11.0.20+8-1ubuntu1~18.04
openjdk-17 Ubuntu:Pro:18.04:LTS
- Versions
- 17+35-1~18.04
- 17.0.1+12-1~18.04
- 17.0.2+8-1~18.04
- 17.0.3+7-0ubuntu0.18.04.1
- 17.0.4+8-1~18.04
- 17.0.5+8-2ubuntu1~18.04
- 17.0.6+10-0ubuntu1~18.04.1
- 17.0.7+7~us1-0ubuntu1~18.04
- Affected ranges
- ECOSYSTEM: < 17.0.8+7-1~18.04
Update to 17.0.8+7-1~18.04
harfbuzz Ubuntu:20.04:LTS
- Versions
- 2.6.1-3
- 2.6.2-1
- 2.6.4-1
- 2.6.4-1ubuntu1
- 2.6.4-1ubuntu2
- 2.6.4-1ubuntu3
- 2.6.4-1ubuntu4
- 2.6.4-1ubuntu4.2
- Affected ranges
- ECOSYSTEM: < 2.6.4-1ubuntu4.3
Update to 2.6.4-1ubuntu4.3
openjdk-17 Ubuntu:20.04:LTS
- Versions
- 17+35-1~20.04
- 17.0.1+12-1~20.04
- 17.0.2+8-1~20.04
- 17.0.3+7-0ubuntu0.20.04.1
- 17.0.4+8-1~20.04
- 17.0.5+8-2ubuntu1~20.04
- 17.0.6+10-0ubuntu1~20.04.1
- 17.0.7+7~us1-0ubuntu1~20.04
- Affected ranges
- ECOSYSTEM: < 17.0.8+7-1~20.04.2
Update to 17.0.8+7-1~20.04.2
openjdk-lts Ubuntu:20.04:LTS
- Versions
- 11.0.5+10-0ubuntu1
- 11.0.5+10-2ubuntu1
- 11.0.6+10-1ubuntu1
- 11.0.6+10-2ubuntu2
- 11.0.7+9-1ubuntu1
- 11.0.7+10-2ubuntu1
- 11.0.7+10-3ubuntu1
- 11.0.8+10-0ubuntu1~20.04
- 11.0.9+11-0ubuntu1~20.04
- 11.0.9.1+1-0ubuntu1~20.04
- 11.0.10+9-0ubuntu1~20.04
- 11.0.11+9-0ubuntu2~20.04
- 11.0.13+8-0ubuntu1~20.04
- 11.0.14+9-0ubuntu2~20.04
- 11.0.14.1+1-0ubuntu1~20.04
- 11.0.15+10-0ubuntu0.20.04.1
- 11.0.16+8-0ubuntu1~20.04
- 11.0.17+8-1ubuntu2~20.04
- 11.0.18+10-0ubuntu1~20.04.1
- 11.0.19+7~us1-0ubuntu1~20.04.1
- Affected ranges
- ECOSYSTEM: < 11.0.20+8-1ubuntu1~20.04
Update to 11.0.20+8-1ubuntu1~20.04
openjdk-13 Ubuntu:20.04:LTS
- Versions
- 13+33-1
- 13.0.1+9-2
- 13.0.2+8-1
- 13.0.2+8-2
- 13.0.3+3-1ubuntu2
- 13.0.4+8-1~20.04
- 13.0.7+5-0ubuntu1~20.04
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-16 Ubuntu:20.04:LTS
- Versions
- 16.0.1+9-1~20.04
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
harfbuzz Ubuntu:22.04:LTS
- Versions
- 2.7.4-1ubuntu1
- 2.7.4-1ubuntu2
- 2.7.4-1ubuntu3
- 2.7.4-1ubuntu3.1
- Affected ranges
- ECOSYSTEM: < 2.7.4-1ubuntu3.2
Update to 2.7.4-1ubuntu3.2
openjdk-17 Ubuntu:22.04:LTS
- Versions
- 17+35-1
- 17.0.1+12-1
- 17.0.2+8-1
- 17.0.3+7-0ubuntu0.22.04.1
- 17.0.4+8-1~22.04
- 17.0.5+8-2ubuntu1~22.04
- 17.0.6+10-0ubuntu1~22.04
- 17.0.7+7~us1-0ubuntu1~22.04.2
- Affected ranges
- ECOSYSTEM: < 17.0.8+7-1~22.04
Update to 17.0.8+7-1~22.04
openjdk-18 Ubuntu:22.04:LTS
- Versions
- 18~15ea-4
- 18~20ea-1
- 18~32ea-1
- 18~36ea-1
- 18.0.2+9-2~22.04
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openjdk-21 Ubuntu:22.04:LTS
- Affected ranges
- ECOSYSTEM: < 21.0.1+12-2~22.04
Update to 21.0.1+12-2~22.04
openjdk-lts Ubuntu:22.04:LTS
- Versions
- 11.0.12+7-0ubuntu3
- 11.0.13+8-0ubuntu1
- 11.0.14+9-0ubuntu2
- 11.0.14.1+1-0ubuntu1
- 11.0.15+10-0ubuntu0.22.04.1
- 11.0.16+8-0ubuntu1~22.04
- 11.0.17+8-1ubuntu2~22.04
- 11.0.18+10-0ubuntu1~22.04
- 11.0.19+7~us1-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 11.0.20+8-1ubuntu1~22.04
Update to 11.0.20+8-1ubuntu1~22.04
openjdk-lts Ubuntu:24.04:LTS
- Affected ranges
- ECOSYSTEM: < 11.0.20+8-1ubuntu1
Update to 11.0.20+8-1ubuntu1
Original sources
- https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc
- https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361
- https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/
- https://security.netapp.com/advisory/ntap-20230725-0006/
- https://nvd.nist.gov/vuln/detail/CVE-2023-25193