CVE-2016-5384

Published: Aug 13, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.

Affected (7)

Products: Fedoraproject: Fedora · Fontconfig Project: Fontconfig · Debian: Debian Linux · +1 more

Show all products

Fedoraproject: Fedora · Fontconfig Project: Fontconfig · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23
Fedoraproject Fedora	Version 24

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fontconfig Project Fontconfig	Before 2.12.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04

Related CWEs

CWE-415

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (16)

http://rhn.redhat.com/errata/RHSA-2016-2601.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3644

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/92339

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3063-1

Source: secalert@redhat.com

Third Party Advisory

https://cgit.freedesktop.org/fontconfig/commit/?id=7a4a5bd7897d216f0794ca9dbce0a4a5c9d14940

Source: secalert@redhat.com

PatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CJ45VRAMCIISHOVKFVOQYQUSTUJP7FC/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGOS4YYB7UYAWX5AEXJZHDIX4ZMSXSW5/

Source: secalert@redhat.com

https://lists.freedesktop.org/archives/fontconfig/2016-August/005792.html

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2601.html