Vulnerability · Published Feb 4, 2023 · Assigned by mitre
CVE-2023-25193
High 7.5
In plain English
A high-severity resource allocation without limits in the harfbuzz package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.8%top 21.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | harfbuzz | 1.7.5-4.el8 | ALSA-2024:2980 |
| AlmaLinux:9 | harfbuzz | 2.7.4-10.el9 | ALSA-2024:2410 |
| AlmaLinux:8 | harfbuzz-devel | 1.7.5-4.el8 | ALSA-2024:2980 |
| AlmaLinux:9 | harfbuzz-devel | 2.7.4-10.el9 | ALSA-2024:2410 |
| AlmaLinux:8 | harfbuzz-icu | 1.7.5-4.el8 | ALSA-2024:2980 |
| AlmaLinux:9 | harfbuzz-icu | 2.7.4-10.el9 | ALSA-2024:2410 |
| AlmaLinux:8 | java-11-openjdk | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-demo | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-demo | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-demo-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-demo-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-demo-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-demo-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-devel | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-devel | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-devel-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-devel-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-devel-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-devel-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-headless | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-headless | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-headless-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-headless-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-headless-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-headless-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-javadoc | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-javadoc | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-javadoc-zip | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-javadoc-zip | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-jmods | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-jmods | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-jmods-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-jmods-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-jmods-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-jmods-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-src | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-src | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-src-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-src-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-src-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-src-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-static-libs | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-static-libs | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-static-libs-fastdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-static-libs-fastdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-11-openjdk-static-libs-slowdebug | 1:11.0.20.0.8-2.el8 | ALSA-2023:4175 |
| AlmaLinux:9 | java-11-openjdk-static-libs-slowdebug | 1:11.0.20.0.8-2.el9 | ALSA-2023:4158 |
| AlmaLinux:8 | java-17-openjdk | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-demo | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-demo | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-devel | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-devel | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-headless | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-headless | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-jmods | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-jmods | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-src | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-src | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.8.0.7-2.el8 | ALSA-2023:4159 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.8.0.7-2.el9 | ALSA-2023:4177 |
| Alpine:v3.20 | openjdk11 | 11.0.20_p8-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.21 | openjdk11 | 11.0.20_p8-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.22 | openjdk11 | 11.0.20_p8-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.23 | openjdk11 | 11.0.20_p8-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.24 | openjdk11 | 11.0.20_p8-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.20 | openjdk17 | 17.0.8_p7-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.21 | openjdk17 | 17.0.8_p7-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.22 | openjdk17 | 17.0.8_p7-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.23 | openjdk17 | 17.0.8_p7-r0 | ALPINE-CVE-2023-25193 |
| Alpine:v3.24 | openjdk17 | 17.0.8_p7-r0 | ALPINE-CVE-2023-25193 |
| Debian:12 | harfbuzz | no fix listed | DEBIAN-CVE-2023-25193 |
| Debian:13 | harfbuzz | 8.0.0-1 | DEBIAN-CVE-2023-25193 |
| Debian:14 | harfbuzz | 8.0.0-1 | DEBIAN-CVE-2023-25193 |
| Rocky Linux:8 | harfbuzz | 0:1.7.5-4.el8 | RLSA-2024:2980 |
| Rocky Linux:9 | harfbuzz | 0:2.7.4-10.el9 | RLSA-2024:2410 |
| Ubuntu:22.04:LTS | harfbuzz | 2.7.4-1ubuntu3.2 | USN-7251-1 |
| Ubuntu:22.04:LTS | harfbuzz | 2.7.4-1ubuntu3.2 | UBUNTU-CVE-2023-25193 |
| Ubuntu:22.04:LTS | openjdk-17 | 17.0.8+7-1~22.04 | USN-6263-1 |
| Ubuntu:22.04:LTS | openjdk-17 | 17.0.8+7-1~22.04 | UBUNTU-CVE-2023-25193 |
| Ubuntu:22.04:LTS | openjdk-18 | no fix listed | UBUNTU-CVE-2023-25193 |
| Ubuntu:22.04:LTS | openjdk-21 | 21.0.1+12-2~22.04 | UBUNTU-CVE-2023-25193 |
| Ubuntu:22.04:LTS | openjdk-8 | 8u382-ga-1~22.04.1 | USN-6263-1 |
| Ubuntu:22.04:LTS | openjdk-lts | 11.0.20+8-1ubuntu1~22.04 | USN-6263-1 |
| Ubuntu:22.04:LTS | openjdk-lts | 11.0.20+8-1ubuntu1~22.04 | UBUNTU-CVE-2023-25193 |
| Ubuntu:24.04:LTS | openjdk-lts | 11.0.20+8-1ubuntu1 | UBUNTU-CVE-2023-25193 |
Affected products (as reported)
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc
- https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361
- https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh
- FEDORA-2023-4e6353c6f7 vendor-advisory
- FEDORA-2023-a48406ecd2 vendor-advisory
- https://security.netapp.com/advisory/ntap-20230725-0006/