CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15120

libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.067

EPSS Ranking 90.8%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-15120

Gnome » Pango » Version: 1.40.10

cpe:2.3:a:gnome:pango:1.40.10
Gnome » Pango » Version: 1.40.11

cpe:2.3:a:gnome:pango:1.40.11
Gnome » Pango » Version: 1.40.12

cpe:2.3:a:gnome:pango:1.40.12
Gnome » Pango » Version: 1.40.13

cpe:2.3:a:gnome:pango:1.40.13
Gnome » Pango » Version: 1.40.14

cpe:2.3:a:gnome:pango:1.40.14
Gnome » Pango » Version: 1.40.8

cpe:2.3:a:gnome:pango:1.40.8
Gnome » Pango » Version: 1.40.9

cpe:2.3:a:gnome:pango:1.40.9
Gnome » Pango » Version: 1.41.0

cpe:2.3:a:gnome:pango:1.41.0
Gnome » Pango » Version: 1.41.1

cpe:2.3:a:gnome:pango:1.41.1
Gnome » Pango » Version: 1.42.0

cpe:2.3:a:gnome:pango:1.42.0
Gnome » Pango » Version: 1.42.1

cpe:2.3:a:gnome:pango:1.42.1
Gnome » Pango » Version: 1.42.2

cpe:2.3:a:gnome:pango:1.42.2
Gnome » Pango » Version: 1.42.3

cpe:2.3:a:gnome:pango:1.42.3
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15120

Products

Pricing

Contact Us