81 matches found
Amazon Linux 2022 : freetype, freetype-demos, freetype-devel (ALAS2022-2022-154)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-154 advisory. A heap buffer overflow flaw was found in Freetype's sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw...
CVE-2021-27406
CVE-2021-27406 affects PerFact OpenVPN-Client, 1.4.1.0 and earlier. The vulnerability allows an attacker, from any local application, to send the VPN config command to the back-end server, forcing it to initialize a new OpenVPN instance with arbitrary configuration. This can lead to code executio...
CVE-2021-27406 PerFact OpenVPN-Client
An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance with arbitrary open-VPN configuration. This could result in t...
EulerOS Virtualization 3.0.6.0 : freetype (EulerOS-SA-2022-2557)
According to the versions of the freetype packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function...
EulerOS Virtualization 2.9.0 : freetype (EulerOS-SA-2022-2379)
According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function...
EulerOS Virtualization 2.9.1 : freetype (EulerOS-SA-2022-2343)
According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function...
SUSE SLES15 Security Update : freetype2 (SUSE-SU-2022:3252-2)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3252-2 advisory. - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface bsc1198830. - CVE-2022-27405 Fixed a buffer overflow via a craft...
SUSE: Security Advisory (SUSE-SU-2022:3252-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3252-2 Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface bsc1198830. - CVE-2022-27405 Fixed a buffer overflow via a crafted typeface bsc1198832. - CVE-2022-27406 Fixed a segmentation fault via a crafted typeface bsc1198823...
openSUSE: Security Advisory for freetype2 (SUSE-SU-2022:3252-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15: freetype2-devel / freetype2-devel-32bit / freetype2-profile-tti35 / etc (SUSE-SU-2022:3252-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3252-1 advisory. - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface bsc1198830. - CVE-2022-27405...
CVE-2022-27406 affecting package freetype for versions less than 2.12.1-1
CVE-2022-27406 affecting package freetype for versions less than 2.12.1-1. An upgraded version of the package is available that resolves this issue...
USN-5528-1: FreeType vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, or...
CVE-2022-27406 affecting package freetype 2.11.1-2
CVE-2022-27406 affecting package freetype 2.11.1-2. An upgraded version of the package is available that resolves this issue...
EulerOS 2.0 SP10 : freetype (EulerOS-SA-2022-2155)
According to the versions of the freetype package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2022-2155)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2022-2130)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : freetype (EulerOS-SA-2022-2130)
According to the versions of the freetype package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...
Security advisory: FreeType in Qt
There have been three vulnerabilities found in FreeType recently and they have been assigned the CVE ids CVE-2022-27404, CVE-2022-27405, CVE-2022-27406. This has been fixed in the latest version of FreeType – v2.12.1 These effects configurations of Qt that have been built against the bundled...
EulerOS Virtualization 2.10.0 : freetype (EulerOS-SA-2022-2088)
According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function...