rpm package
suse/fribidi&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP3
pkg:rpm/suse/fribidi&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25310 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. | ||
| CVE-2022-25309 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l | ||
| CVE-2022-25308 | — | < 1.0.5-150200.3.6.1 | 1.0.5-150200.3.6.1 | Sep 6, 2022 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. | ||
| CVE-2019-18397 | — | < 1.0.5-3.3.1 | 1.0.5-3.3.1 | Nov 13, 2019 | A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then re |
- CVE-2022-25310Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
- CVE-2022-25309Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l
- CVE-2022-25308Sep 6, 2022affected < 1.0.5-150200.3.6.1fixed 1.0.5-150200.3.6.1
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
- CVE-2019-18397Nov 13, 2019affected < 1.0.5-3.3.1fixed 1.0.5-3.3.1
A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then re