Denial Of Service (DoS)

2019-01-1509:04:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.012 Low

EPSS

Percentile

85.6%

JSON

freetype is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.

CPENameOperatorVersion
freetypeeq2.3.11__6.el6_1.6
freetypeeq2.3.11__6.el6_0.1
freetypeeq2.3.11__6.el6_2.9
freetypeeq2.3.11__6.el6_1.8
freetypeeq2.3.11__5.el6
freetypeeq2.3.11__6.el6_0.2
freetypeeq2.3.11__6.el6_1.7
freetypeeq2.3.11__14.el6_3.1

Name	Operator	Version
freetype	eq	2.3.11__6.el6_1.6
freetype	eq	2.3.11__6.el6_0.1
freetype	eq	2.3.11__6.el6_2.9
freetype	eq	2.3.11__6.el6_1.8
freetype	eq	2.3.11__5.el6
freetype	eq	2.3.11__6.el6_0.2
freetype	eq	2.3.11__6.el6_1.7
freetype	eq	2.3.11__14.el6_3.1