CVE-2018-7999
Fixed in a distro release EPSS 2%
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Products: sil graphite2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphite2 | 1.3.11-2 |
| Debian 13 | graphite2 | 1.3.11-2 |
| Debian 14 | graphite2 | 1.3.11-2 |
| SUSE Linux Enterprise Desktop 12 SP2 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | graphite2 | 1.3.1-10.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | graphite2 | 1.3.1-10.3.1 |
| Ubuntu 14.04 LTS | graphite2 | no fix |
| Ubuntu Pro 16.04 LTS | graphite2 | 1.3.10-0ubuntu0.16.04.1+esm1 |
| openSUSE Tumbleweed | graphite2 | 1.3.14-2.2 |