FreeType: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2017-8287

  FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builde…

  freetype freetype freetype Debian Ubuntu Alpine
  Apr 27, 2017

Revision history

1. 2025-06-03 #8

   Neue Updates von SUSE aufgenommen

2. 2018-02-18 #7

   New remediations available

3. 2017-06-06 #6

   Added references

4. 2017-05-17 #5

   New remediations available

5. 2017-05-02 #4

   Added references

6. 2017-05-01 #3

   New remediations available

7. 2017-04-27 #1

   Initial Release

8. 2017-04-27 #2

   Version nicht vorhanden

References

• CVE Details vom 2017-04-27
  http://www.cvedetails.com/cve/CVE-2017-8287/
• Debian Security Tracker CVE-2017-8287 vom 2017-04-27
  https://security-tracker.debian.org/tracker/CVE-2017-8287
• Debian Security Advisory DSA-3839 vom 2017-04-29
  https://www.debian.org/security/2017/dsa-3839
• Ubuntu Security Notice USN-3282-1 vom 2017-05-09
  http://www.ubuntu.com/usn/usn-3282-1/
• Ubuntu Security Notice USN-3282-2 vom 2017-05-18
  http://www.ubuntu.com/usn/usn-3282-2/
• SUSE Security Update SUSE-SU-2018:0414-1 vom 2018-02-10
  https://www.suse.com/support/update/announcement/2018/suse-su-20180414-1.html
• SUSE Security Update SUSE-SU-2018:0462-1 vom 2018-02-17
  https://www.suse.com/support/update/announcement/2018/suse-su-20180462-1.html
• SUSE Security Update SUSE-SU-2025:20204-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021143.html
• SUSE Security Update SUSE-SU-2025:20204-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021136.html