rpm package
opensuse/fribidi&distro=openSUSE Leap 15.4
pkg:rpm/opensuse/fribidi&distro=openSUSE%20Leap%2015.4
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25310 | — | < 1.0.10-150400.3.3.1 | 1.0.10-150400.3.3.1 | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. | ||
| CVE-2022-25309 | — | < 1.0.10-150400.3.3.1 | 1.0.10-150400.3.3.1 | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l | ||
| CVE-2022-25308 | — | < 1.0.10-150400.3.3.1 | 1.0.10-150400.3.3.1 | Sep 6, 2022 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. |
- CVE-2022-25310Sep 6, 2022affected < 1.0.10-150400.3.3.1fixed 1.0.10-150400.3.3.1
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
- CVE-2022-25309Sep 6, 2022affected < 1.0.10-150400.3.3.1fixed 1.0.10-150400.3.3.1
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l
- CVE-2022-25308Sep 6, 2022affected < 1.0.10-150400.3.3.1fixed 1.0.10-150400.3.3.1
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.