Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-6942

Fixed in a distro release EPSS 2%

An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.

Published 2018-02-13 · CVE record · OSV

Products: freetype, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10freetype2.9-r1
Alpine 3.11freetype2.9-r1
Alpine 3.12freetype2.9-r1
Alpine 3.13freetype2.9-r1
Alpine 3.14freetype2.9-r1
Alpine 3.15freetype2.9-r1
Alpine 3.16freetype2.9-r1
Alpine 3.17freetype2.9-r1
Alpine 3.18freetype2.9-r1
Alpine 3.19freetype2.9-r1
Alpine 3.20freetype2.9-r1
Alpine 3.21freetype2.9-r1
Alpine 3.22freetype2.9-r1
Alpine 3.23freetype2.9-r1
Alpine 3.24freetype2.9-r1
Alpine 3.5freetype2.7-r2
Alpine 3.6freetype2.7.1-r2
Alpine 3.7freetype2.8.1-r3
Alpine 3.8freetype2.9-r1
Alpine 3.9freetype2.9-r1
Arch Linuxfreetype22.9.1-1
Debian 12freetype2.9.1-3
Debian 13freetype2.9.1-3
Debian 14freetype2.9.1-3
SUSE Linux Enterprise Module for Basesystem 15 SP1freetype22.10.1-4.3.1
openSUSE Leap 15.1freetype22.10.1-lp151.4.3.1
openSUSE Leap 15.1ft2demos2.10.1-lp151.4.3.1
openSUSE Tumbleweedfreetype22.11.0-1.2