{"schemaVersion":3,"id":"CVE-2018-15120","aliases":["ALPINE-CVE-2018-15120","SUSE-SU-2018:2763-1","UBUNTU-CVE-2018-15120","USN-3750-1","DEBIAN-CVE-2018-15120","openSUSE-SU-2024:10843-1"],"status":"published","duplicateOf":null,"title":null,"description":"libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.","dates":{"published":"2018-08-24T19:00:00.000Z","modified":"2024-08-05T09:46:25.320Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true}]},"epss":{"probability":0.11499,"percentile":0.95983,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.11499},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.11499,"percentile":0.95983}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.11499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.11499,"percentile":0.95983}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_2E943C6114AE370E","name":"Exploit Reference (52.117.224.77)","source":"reference","url":"http://52.117.224.77/xfce4-pdos.webm","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_30E66E581FCF5760","name":"Exploit Reference (ign.com)","source":"reference","url":"https://www.ign.com/articles/2018/10/16/ps4s-are-reportedly-being-bricked-and-sony-is-working-on-a-fix","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"45263","name":"Libpango 1.40.8 - Denial of Service (PoC)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/45263","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"dos","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"dos","platform":"multiple","file":"exploits/multiple/dos/45263.sh","codes":["CVE-2018-15120"]},"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"alpine","product":"pango","name":"pango","label":"pango","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/pango","purlType":"apk","versions":[{"text":"≥ 1.40.8, < 1.40.14-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.40.8, < 1.40.14-r1","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"18.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"18.04","eol":{"isEol":true,"eolDate":"2023-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"18.04","label":"18.04 'Bionic Beaver' (LTS)","eolFrom":"2023-05-31T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"18.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"pango1.0","name":"pango1.0","label":"pango1.0","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/pango1.0","purlType":"deb","versions":[{"text":"< 1.42.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.4-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"pango1.0","name":"pango1.0","label":"pango1.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pango1.0","purlType":"deb","versions":[{"text":"< 1.40.14-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.40.14-1ubuntu0.1","eol":null,"hubHref":null},{"vendor":"gnome","product":"pango","name":"pango","label":"pango","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.40.8, ≤ 1.42.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.40.8, ≤ 1.42.3","eol":null,"hubHref":"/vendor/gnome/pango"},{"vendor":"opensuse","product":"hexchat&distro=openSUSE Tumbleweed","name":"hexchat","label":"hexchat&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/hexchat&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 2.14.3-4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.3-4.4","eol":null,"hubHref":null},{"vendor":"suse","product":"pango&distro=SUSE Linux Enterprise Module for Basesystem 15","name":"pango","label":"pango&distro=SUSE Linux Enterprise Module for Basesystem 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/pango&distro=SUSE Linux Enterprise Module for Basesystem 15","purlType":"rpm","versions":[{"text":"< 1.40.14-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.40.14-3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"pango&distro=SUSE Linux Enterprise Module for Desktop Applications 15","name":"pango","label":"pango&distro=SUSE Linux Enterprise Module for Desktop Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/pango&distro=SUSE Linux Enterprise Module for Desktop Applications 15","purlType":"rpm","versions":[{"text":"< 1.40.14-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.40.14-3.3.1","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://www.exploit-db.com/exploits/45263/","label":"www.exploit-db.com/exploits/45263/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/GNOME/pango/blob/1.42.4/NEWS","label":"github.com/GNOME/pango/blob/1.42.4/NEWS","hostname":"github.com","tags":["X Refsource CONFIRM","Release Notes","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3750-1/","label":"usn.ubuntu.com/3750-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f","label":"github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f","hostname":"github.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201811-07","label":"security.gentoo.org/glsa/201811-07","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://mail.gnome.org/archives/distributor-list/2018-August/msg00001.html","label":"mail.gnome.org/archives/distributor-list/2018-August/msg00001.html","hostname":"mail.gnome.org","tags":["Mailing List","X Refsource MLIST","Patch","Third Party Advisory"]},{"url":"http://52.117.224.77/xfce4-pdos.webm","label":"52.117.224.77/xfce4-pdos.webm","hostname":"52.117.224.77","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.ign.com/articles/2018/10/16/ps4s-are-reportedly-being-bricked-and-sony-is-working-on-a-fix","label":"www.ign.com/articles/2018/10/16/ps4s-are-reportedly-being-bricked-and-sony-is-working-on-a-fix","hostname":"www.ign.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.reddit.com/r/PS4/comments/9o5efg/message_bricking_console_megathread/","label":"www.reddit.com/r/PS4/comments/9o5efg/message_bricking_console_megathread/","hostname":"www.reddit.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/45263","label":"www.exploit-db.com/exploits/45263","hostname":"www.exploit-db.com","tags":["X Refsource MISC","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://i.redd.it/v7p4n2ptu0s11.jpg","label":"i.redd.it/v7p4n2ptu0s11.jpg","hostname":"i.redd.it","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-15120","label":"security.alpinelinux.org/vuln/CVE-2018-15120","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182763-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182763-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1103877","label":"bugzilla.suse.com/1103877","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15120","label":"www.suse.com/security/cve/CVE-2018-15120","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2018-15120","label":"ubuntu.com/security/CVE-2018-15120","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3750-1","label":"ubuntu.com/security/notices/USN-3750-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15120","label":"www.cve.org/CVERecord?id=CVE-2018-15120","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-15120","label":"security-tracker.debian.org/tracker/CVE-2018-15120","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-08-24T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T09:46:25.320Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":38,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:26:11.022Z","stale":false,"partial":false}}