CVE-2017-7864
Fixed in a distro release EPSS 4%
FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c.
Products: freetype
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | freetype2 | 2.6.3-7.15.1 |