ASLR Bypass

🗓️ 02 May 2019 05:12:39Reported by Veracode Vulnerability DatabaseType

FreeType font engine integer overflow flaws leading to buffer overflows and application crashe

Reporter	Title	Published	Views	Family All 250
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple freetype2 vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Fixed in IBM Security Privileged Identity Manager	16 Jun 201821:26	–	ibm
IBM Security Bulletins	Security Bulletin: PowerKVM is affected by freetype vulnerabilities (Multiple CVEs)	18 Jun 201801:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in krb5, giflib and freetype2 affect IBM BladeCenter Advanced Management Module (AMM) and IBM Flex System Chassis Management Module (CMM)	14 Apr 202314:32	–	ibm
Amazon	Important: freetype	1 Apr 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : freetype (ALAS-2015-502)	2 Apr 201500:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : freetype (CESA-2015:0696)	19 Mar 201500:00	–	nessus
Tenable Nessus	Debian DLA-185-1 : freetype security update	1 Apr 201500:00	–	nessus
Tenable Nessus	Debian DSA-3188-1 : freetype - security update	17 Mar 201500:00	–	nessus
Tenable Nessus	Debian DSA-3461-1 : freetype - security update	1 Feb 201600:00	–	nessus

Vulners

Node

freetype freetypeMatch2.3.11_6.el6_2.9

freetype freetypeMatch2.3.11_6.el6_1.8

freetype freetypeMatch2.3.11_5.el6

freetype freetypeMatch2.3.11_6.el6_0.1

freetype freetypeMatch2.3.11_6.el6_1.6

freetype freetypeMatch2.3.11_14.el6_3.1

freetype freetypeMatch2.3.11_6.el6_1.7

freetype freetypeMatch2.3.11_6.el6_0.2

Source	Link
securityfocus	www.securityfocus.com/bid/72986
access	www.access.redhat.com/security/updates/classification/
rhn	www.rhn.redhat.com/errata/RHSA-2015-0696.html
debian	www.debian.org/security/2015/dsa-3188
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
security	www.security.gentoo.org/glsa/201503-05
advisories	www.advisories.mageia.org/MGASA-2015-0083.html
code	www.code.google.com/p/google-security-research/issues/detail
git	www.git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/

19 Apr 2022 18:38Current

8.7High risk

Vulners AI Score8.7

CVSS 27.5

EPSS0.04649