CVE-2020-15999

Опубликовано: 03 нояб. 2020

Источник: ubuntu

Приоритет: high

EPSS Критический

CVSS2: 4.3

CVSS3: 9.6

Описание

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
esm-apps/xenial	needs-triage
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE
impish	DNE
jammy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	86.0.4240.198-0ubuntu0.18.04.1
devel	not-affected	code not present
esm-apps/noble	not-affected	code not present
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE	focal was not-affected [code not present]
focal	not-affected	code not present
groovy	not-affected	code not present
hirsute	not-affected	code not present
impish	not-affected	code not present
jammy	not-affected	code not present

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype
impish	not-affected	uses system freetype
jammy	not-affected	uses system freetype
kinetic	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	released	2.8.1-2ubuntu2.1
devel	released	2.10.2+dfsg-3ubuntu1
esm-infra-legacy/trusty	not-affected	2.5.2-1ubuntu2.8+esm2
esm-infra/bionic	not-affected	2.8.1-2ubuntu2.1
esm-infra/focal	not-affected	2.10.1-2ubuntu0.1
esm-infra/xenial	not-affected	2.6.1-0.1ubuntu2.5
focal	released	2.10.1-2ubuntu0.1
groovy	released	2.10.2+dfsg-3ubuntu1
hirsute	released	2.10.2+dfsg-3ubuntu1
impish	released	2.10.2+dfsg-3ubuntu1

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	not-affected	code not compiled
esm-apps/focal	not-affected	code not compiled
esm-apps/jammy	not-affected	code not compiled
esm-apps/noble	not-affected	code not compiled
esm-infra-legacy/trusty	DNE
focal	not-affected	code not compiled
groovy	not-affected	code not compiled
hirsute	not-affected	code not compiled
impish	not-affected	code not compiled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code not present
devel	not-affected	code not present
esm-apps/bionic	not-affected	code not present
esm-apps/focal	not-affected	code not present
esm-apps/jammy	not-affected	code not present
esm-apps/noble	not-affected	code not present
esm-apps/xenial	not-affected	code not present
esm-infra-legacy/trusty	not-affected	code not present
focal	not-affected	code not present
groovy	not-affected	code not present

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	DNE
esm-apps/bionic	not-affected	uses system freetype
esm-apps/focal	not-affected	code not present
esm-apps/xenial	not-affected	code not present
esm-infra-legacy/trusty	DNE
focal	not-affected	code not present
groovy	not-affected	code not present
hirsute	DNE
impish	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	DNE
hirsute	DNE
impish	DNE
jammy	DNE
kinetic	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
esm-apps/focal	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	DNE
impish	DNE
jammy	DNE
kinetic	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	DNE
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype
impish	DNE
jammy	DNE
kinetic	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	not-affected	uses system freetype
esm-apps/noble	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	uses system freetype
esm-infra/focal	not-affected	uses system freetype
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype
impish	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
esm-infra/xenial	not-affected	uses system freetype
focal	DNE
groovy	DNE
hirsute	DNE
impish	DNE
jammy	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code not present
devel	needs-triage
esm-apps/bionic	not-affected	code not present
esm-apps/focal	not-affected	uses system freetype
esm-apps/jammy	not-affected	uses system freetype
esm-apps/noble	not-affected	uses system freetype
esm-apps/xenial	not-affected	code not present
esm-infra-legacy/trusty	DNE
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	not-affected	uses system freetype
esm-apps/focal	not-affected	uses system freetype
esm-apps/jammy	not-affected	uses system freetype
esm-apps/noble	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	uses system freetype
esm-infra/xenial	not-affected	uses system freetype
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	not-affected	uses system freetype
esm-apps/focal	not-affected	uses system freetype
esm-apps/jammy	not-affected	uses system freetype
esm-apps/noble	not-affected	uses system freetype
esm-apps/xenial	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	uses system freetype
esm-infra/focal	not-affected	uses system freetype
esm-infra/xenial	not-affected	uses system freetype
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype
impish	not-affected	uses system freetype

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	code not compiled
devel	not-affected	code not compiled
esm-apps/bionic	not-affected	code not compiled
esm-apps/focal	not-affected	code not compiled
esm-apps/jammy	not-affected	code not compiled
esm-apps/noble	not-affected	code not compiled
esm-apps/xenial	not-affected	code not present
esm-infra-legacy/trusty	DNE
focal	not-affected	code not compiled
groovy	not-affected	code not compiled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	uses system freetype
devel	not-affected	uses system freetype
esm-infra-legacy/trusty	DNE
esm-infra/focal	DNE
focal	not-affected	uses system freetype
groovy	not-affected	uses system freetype
hirsute	not-affected	uses system freetype
impish	not-affected	uses system freetype
jammy	not-affected	uses system freetype
kinetic	not-affected	uses system freetype

Показывать по

Ссылки на источники

EPSS

Процентиль: 100%

0.92766

Критический

4.3 Medium

CVSS2

9.6 Critical

CVSS3

Связанные уязвимости

CVE-2020-15999

CVSS3: 8.6

redhat

больше 4 лет назад

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-15999

CVSS3: 9.6

nvd

больше 4 лет назад

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-15999

CVSS3: 6.5

msrc

4 месяца назад

Описание отсутствует

CVE-2020-15999

CVSS3: 9.6

debian

больше 4 лет назад

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.1 ...

openSUSE-SU-2020:1744-1

suse-cvrf

больше 4 лет назад

Security update for freetype2

EPSS

Процентиль: 100%

0.92766

Критический

4.3 Medium

CVSS2

9.6 Critical

CVSS3

CVE-2020-15999

Описание

Пакет android

Пакет chromium-browser

Пакет firefox

Пакет freetype

Пакет godot

Пакет graphicsmagick

Пакет musescore

Пакет openjdk-12

Пакет openjdk-13

Пакет openjdk-15

Пакет openjdk-lts

Пакет oxide-qt

Пакет paraview

Пакет qtbase-opensource-src

Пакет qtbase-opensource-src-gles

Пакет texlive-bin

Пакет texmaker

Пакет thunderbird

Ссылки на источники

Связанные уязвимости