rpm package
almalinux/fribidi-devel
pkg:rpm/almalinux/fribidi-devel
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25310 | — | < 1.0.4-9.el8 | 1.0.4-9.el8 | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. | ||
| CVE-2022-25309 | — | < 1.0.4-9.el8 | 1.0.4-9.el8 | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l | ||
| CVE-2022-25308 | — | < 1.0.4-9.el8 | 1.0.4-9.el8 | Sep 6, 2022 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. |
- CVE-2022-25310Sep 6, 2022affected < 1.0.4-9.el8fixed 1.0.4-9.el8
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
- CVE-2022-25309Sep 6, 2022affected < 1.0.4-9.el8fixed 1.0.4-9.el8
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l
- CVE-2022-25308Sep 6, 2022affected < 1.0.4-9.el8fixed 1.0.4-9.el8
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.