Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0779-1

Опубликовано: 15 мар. 2016
Источник: suse-cvrf

Описание

Security update for graphite2

This update for graphite2 fixes the following issues:

  • CVE-2016-1521: The directrun function in directmachine.cpp in Libgraphite did not validate a certain skip operation, which allowed remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

  • CVE-2016-1523: The SillMap::readFace function in FeatureMap.cpp in Libgraphite mishandled a return value, which allowed remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

  • CVE-2016-1526: The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite incorrectly validated a size value, which allowed remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Список пакетов

SUSE Linux Enterprise Desktop 12
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Desktop 12 SP1
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Server 12
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Server 12 SP1
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Server for SAP Applications 12
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libgraphite2-3-1.3.1-6.1
libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Software Development Kit 12
graphite2-devel-1.3.1-6.1
SUSE Linux Enterprise Software Development Kit 12 SP1
graphite2-devel-1.3.1-6.1

Ссылки

Описание

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-32bit-1.3.1-6.1
Ссылки

Описание

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-32bit-1.3.1-6.1
Ссылки

Описание

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12 SP1:libgraphite2-3-32bit-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-1.3.1-6.1
SUSE Linux Enterprise Desktop 12:libgraphite2-3-32bit-1.3.1-6.1
Ссылки
Уязвимость SUSE-SU-2016:0779-1