Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-27405HistoryApr 22, 2022 - 2:15 p.m.
CVE-2022-27405
2022-04-2214:15:09
Alpine Linux Development Team
security.alpinelinux.org
82
freetype
commit
segmentation violation
fnt_size_request
unix
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.8
Confidence
High
EPSS
0.003
Percentile
66.3%
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | qt5-qtwebengine | < 5.15.3_git20220601-r2 | UNKNOWN |
| Alpine | edge-main | noarch | freetype | < 2.12.1-r0 | UNKNOWN |
| Alpine | 3.12-main | noarch | freetype | < 2.10.4-r2 | UNKNOWN |
| Alpine | 3.13-main | noarch | freetype | < 2.10.4-r3 | UNKNOWN |
| Alpine | 3.14-main | noarch | freetype | < 2.10.4-r3 | UNKNOWN |
| Alpine | 3.15-main | noarch | freetype | < 2.11.1-r2 | UNKNOWN |
| Alpine | 3.16-community | noarch | qt5-qtwebengine | < 5.15.3_git20220505-r3 | UNKNOWN |
| Alpine | 3.16-main | noarch | freetype | < 2.12.1-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | qt5-qtwebengine | < 5.15.3_git20220601-r2 | UNKNOWN |
| Alpine | 3.17-main | noarch | freetype | < 2.12.1-r0 | UNKNOWN |
Related
redhatcve
redhatcve
CVE-2022-27405
2022-04-22 19:36:28
ubuntucve
ubuntucve
CVE-2022-27405
2022-04-22 00:00:00
prion
prion
Design/Logic Flaw
2022-04-22 14:15:00
veracode
veracode
Denial Of Service (DoS)
2022-05-19 15:31:03
osv
osv
Vulnerability: 3 vulnerabilities affecting GitOnBorg::android::platform::external::freetype
2023-07-01 00:00:00
CVE-2022-27405
2022-04-22 14:15:09
CGA-8wv4-f947-j25w
2024-06-06 12:25:18
cvelist
cvelist
CVE-2022-27405
2022-04-22 00:00:00
nvd
nvd
CVE-2022-27405
2022-04-22 14:15:09
nessus
nessus
CBL Mariner 2.0 Security Update: freetype (CVE-2022-27405)
2023-03-28 00:00:00
Photon OS 3.0: Freetype2 PHSA-2022-3.0-0394
2024-07-24 00:00:00
EulerOS 2.0 SP9 : freetype (EulerOS-SA-2022-1964)
2022-07-08 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-27405 affecting package freetype 2.11.1-2
2022-08-24 22:05:05
CVE-2022-27405 affecting package freetype for versions less than 2.12.1-1
2022-08-31 06:17:54
debiancve
debiancve
CVE-2022-27405
2022-04-22 14:15:09
ibm
ibm
cve
cve
CVE-2022-27405
2022-04-22 14:15:09
photon
photon
Important Photon OS Security Update - PHSA-2022-0394
2022-05-16 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0394
2022-05-16 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0183
2022-05-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: freetype-2.12.1-1.fc36
2022-05-07 05:16:35
[SECURITY] Fedora 35 Update: freetype-2.11.0-6.fc35
2022-05-20 01:29:06
[SECURITY] Fedora 36 Update: mingw-freetype-2.12.1-1.fc36
2022-05-11 01:22:40
openvas
openvas
Fedora: Security Advisory for freetype (FEDORA-2022-5e45671294)
2022-05-21 00:00:00
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2022-2379)
2022-09-26 00:00:00
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2022-1964)
2022-07-08 00:00:00
qt
qt
Security advisory: FreeType in Qt
2022-07-27 00:00:00
redhat
redhat
(RHSA-2024:0420) Moderate: freetype security update
2024-01-24 14:40:27
(RHSA-2022:8340) Moderate: freetype security update
2022-11-15 06:21:54
(RHSA-2022:7745) Moderate: freetype security update
2022-11-08 06:27:55
suse
suse
Security update for freetype2 (moderate)
2022-09-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2212
2023-08-08 08:21:24
rocky
rocky
freetype security update
2022-11-15 06:21:54
freetype security update
2022-11-08 06:27:55
almalinux
almalinux
Moderate: freetype security update
2022-11-15 00:00:00
Moderate: freetype security update
2022-11-08 00:00:00
oraclelinux
oraclelinux
freetype security update
2022-11-15 00:00:00
freetype security update
2022-11-22 00:00:00
mageia
mageia
Updated freetype2 packages fix security vulnerability
2022-05-15 13:06:40
amazon
amazon
Medium: freetype
2023-01-18 00:16:00
cloudfoundry
cloudfoundry
USN-5528-1: FreeType vulnerabilities | Cloud Foundry
2022-08-26 00:00:00
ubuntu
ubuntu
FreeType vulnerabilities
2022-07-20 00:00:00
gentoo
gentoo
FreeType: Multiple Vulnerabilities
2024-02-03 00:00:00
f5
f5
K000141126: Multiple FreeType vulnerabilities
2024-09-19 00:00:00
ics
ics
Siemens RUGGEDCOM APE1808 Product Family
2023-09-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.8
Confidence
High
EPSS
0.003
Percentile
66.3%
Related for ALPINE:CVE-2022-27405