Lucene search
Gentoo FoundationGLSA-201503-05HistoryMar 08, 2015 - 12:00 a.m.
FreeType: Multiple vulnerabilities
2015-03-0800:00:00
Gentoo Foundation
security.gentoo.org
15
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.051 Low
EPSS
Percentile
92.9%
Background
FreeType is a high-quality and portable font engine.
Description
Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker can cause Denial of Service.
Workaround
There is no known workaround at this time.
Resolution
All FreeType users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/freetype-2.5.5"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | media-libs/freetype | < 2.5.5 | UNKNOWN |
Related
ubuntu
ubuntu
FreeType vulnerabilities
2015-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: freetype-2.5.3-15.fc21
2015-02-19 18:01:31
[SECURITY] Fedora 20 Update: freetype-2.5.0-9.fc20
2015-02-20 08:31:09
nessus
nessus
SuSE 11.3 Security Update : freetype2 (SAT Patch Number 10386)
2015-03-11 00:00:00
openSUSE Security Update : freetype2 (openSUSE-2015-274)
2015-03-31 00:00:00
Ubuntu 14.04 LTS : FreeType vulnerabilities (USN-2510-1)
2015-02-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201503-05
2015-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0455-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-2510-1)
2015-02-25 00:00:00
securityvulns
securityvulns
Freetype multiple security vulnerabilities
2015-03-08 00:00:00
[USN-2510-1] FreeType vulnerabilities
2015-03-08 00:00:00
debian
debian
[SECURITY] [DLA 185-1] freetype security update
2015-03-31 23:30:56
[SECURITY] [DSA 3188-1] freetype security update
2015-03-15 19:49:22
[SECURITY] [DSA 3461-1] freetype security update
2016-01-31 08:11:39
osv
osv
freetype - security update
2015-03-15 00:00:00
freetype - security update
2015-04-01 00:00:00
ibm
ibm
mageia
mageia
Updated freetype2 packages fix security vulnerabilities
2015-02-25 00:20:13
veracode
veracode
Integer Overflow
2019-05-02 05:12:39
NULL Pointer Dereference
2019-05-02 05:12:38
Integer Overflow
2019-05-02 05:12:39
redhat
redhat
(RHSA-2015:0696) Important: freetype security update
2015-03-17 16:08:39
f5
f5
K16900 : Multiple FreeType vulnerabilities
2015-07-09 00:00:00
K16380 : FreeType vulnerabilities CVE-2014-9656 and CVE-2014-9659
2015-04-09 00:00:00
SOL16380 - FreeType vulnerabilities CVE-2014-9656 and CVE-2014-9659
2015-04-09 00:00:00
amazon
amazon
Important: freetype
2015-04-01 13:56:00
centos
centos
freetype security update
2015-03-18 18:53:49
oraclelinux
oraclelinux
freetype security update
2015-03-17 00:00:00
ubuntucve
ubuntucve
cvelist
cvelist
debiancve
debiancve
cve
cve
prion
prion
googleprojectzero
googleprojectzero
Déjà vu-lnerability
2021-02-03 00:00:00
androidsecurity
androidsecurity
Android Security Bulletin—November 2016
2016-11-07 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.051 Low
EPSS
Percentile
92.9%
Related for GLSA-201503-05