rpm package
opensuse/fribidi&distro=openSUSE Leap 15.3
pkg:rpm/opensuse/fribidi&distro=openSUSE%20Leap%2015.3
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25310 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. | ||
| CVE-2022-25309 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l | ||
| CVE-2022-25308 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. | ||
| CVE-2019-18397 | — | < 1.0.5-3.3.1 | 1.0.5-3.3.1 | Nov 13, 2019 | A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then re |
- CVE-2022-25310Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
- CVE-2022-25309Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l
- CVE-2022-25308Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
- CVE-2019-18397Nov 13, 2019affected < 1.0.5-3.3.1fixed 1.0.5-3.3.1
A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then re