rpm package
suse/fribidi&distro=SUSE Linux Enterprise Server 15 SP1-LTSS
pkg:rpm/suse/fribidi&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25310 | — | < 0.19.6-150000.3.3.1 | 0.19.6-150000.3.3.1 | Sep 6, 2022 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. | ||
| CVE-2022-25309 | — | < 0.19.6-150000.3.3.1 | 0.19.6-150000.3.3.1 | Sep 6, 2022 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l | ||
| CVE-2022-25308 | — | < 0.19.6-150000.3.3.1 | 0.19.6-150000.3.3.1 | Sep 6, 2022 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. |
- CVE-2022-25310Sep 6, 2022affected < 0.19.6-150000.3.3.1fixed 0.19.6-150000.3.3.1
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
- CVE-2022-25309Sep 6, 2022affected < 0.19.6-150000.3.3.1fixed 0.19.6-150000.3.3.1
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, l
- CVE-2022-25308Sep 6, 2022affected < 0.19.6-150000.3.3.1fixed 0.19.6-150000.3.3.1
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.