CVE-2015-9382

Опубликовано: 03 сент. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

Ссылки

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73
Patch
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4254
https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html
Third Party Advisory
https://savannah.nongnu.org/bugs/?45922
Exploit
Issue Tracking
Third Party Advisory
https://usn.ubuntu.com/4126-2/
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73
Patch
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4254
https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html
Third Party Advisory
https://savannah.nongnu.org/bugs/?45922
Exploit
Issue Tracking
Third Party Advisory
https://usn.ubuntu.com/4126-2/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*

Версия до 2.6.1 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00798

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2015-9382

CVSS3: 6.5

ubuntu

больше 6 лет назад

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

CVE-2015-9382

CVSS3: 4.3

redhat

больше 6 лет назад

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

CVE-2015-9382

CVSS3: 6.5

debian

больше 6 лет назад

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/ ...

GHSA-mvvp-jc53-vjxq

CVSS3: 6.5

github

больше 3 лет назад

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

ELSA-2019-4254

oracle-oval

около 6 лет назад

ELSA-2019-4254: freetype security update (MODERATE)

EPSS

Процентиль: 74%

0.00798

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125