CVE-2017-8287
Fixed in a distro release EPSS 4%
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.
Products: freetype
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | freetype | 2.7.1-r1 |
| Alpine 3.11 | freetype | 2.7.1-r1 |
| Alpine 3.12 | freetype | 2.7.1-r1 |
| Alpine 3.13 | freetype | 2.7.1-r1 |
| Alpine 3.14 | freetype | 2.7.1-r1 |
| Alpine 3.15 | freetype | 2.7.1-r1 |
| Alpine 3.16 | freetype | 2.7.1-r1 |
| Alpine 3.17 | freetype | 2.7.1-r1 |
| Alpine 3.18 | freetype | 2.7.1-r1 |
| Alpine 3.19 | freetype | 2.7.1-r1 |
| Alpine 3.2 | freetype | 2.5.5-r1 |
| Alpine 3.20 | freetype | 2.7.1-r1 |
| Alpine 3.21 | freetype | 2.7.1-r1 |
| Alpine 3.22 | freetype | 2.7.1-r1 |
| Alpine 3.23 | freetype | 2.7.1-r1 |
| Alpine 3.24 | freetype | 2.7.1-r1 |
| Alpine 3.3 | freetype | 2.6.3-r0 |
| Alpine 3.4 | freetype | 2.6.3-r1 |
| Alpine 3.5 | freetype | 2.7.1-r1 |
| Alpine 3.6 | freetype | 2.7.1-r1 |
| Alpine 3.7 | freetype | 2.7.1-r1 |
| Alpine 3.8 | freetype | 2.7.1-r1 |
| Alpine 3.9 | freetype | 2.7.1-r1 |
| Arch Linux | freetype2 | 2.7.1-2 |
| Arch Linux | lib32-freetype2 | 2.7.1-2 |
| Debian 12 | freetype | 2.6.3-3.2 |
| Debian 13 | freetype | 2.6.3-3.2 |
| Debian 14 | freetype | 2.6.3-3.2 |
| Debian 7 | freetype | 2.4.9-1.1+deb7u7 |
| Debian 8 | freetype | 2.5.2-3+deb8u2 |
| SUSE Linux Enterprise Desktop 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | freetype2 | 2.3.7-25.45.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | ft2demos | 2.3.7-25.45.5.1 |
| SUSE Linux Enterprise Server 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | freetype2 | 2.3.7-25.45.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ft2demos | 2.3.7-25.45.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ft2demos | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | freetype2 | 2.3.7-25.45.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | freetype2 | 2.6.3-7.15.1 |
| SUSE Linux Micro 6.0 | freetype2 | 2.13.3-1.1 |
| Ubuntu 14.04 LTS | freetype | 2.5.2-1ubuntu2.8 |
| Ubuntu 16.04 LTS | freetype | 2.6.1-0.1ubuntu2.3 |