PT-2023-17404 · Freetype+3 · Freetype+3

CVE-2023-2004 · Publicado 2023-04-14 · Atualizado 2023-08-28

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Freetype (affected versions not specified)

Description An integer overflow issue was discovered in the tt hvadvance adjust() function in src/truetype/ttgxvar.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2023-2004

MGASA-2023-0182

OESA-2023-1246

OPENSUSE-SU-2023_3461-1

SUSE-SU-2023:3461-1

SUSE-SU-2023_3461-1

USN-6062-1

Produtos afetados

Freetype

Linuxmint

Suse

Ubuntu

Referências · 32

• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://t.me/cvenotify/49158 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-2004.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-2004 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/N3NKW5PFFVVRLURUSLLERESBCPJLFILU · Nota
• https://cve.org/CVERecord?id=CVE-2023-2004 · Nota de Segurança
• https://t.me/cvenotify/48791 · Publicação no Telegram
• https://ubuntu.com/security/notices/USN-6062-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20233461-1 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KDNGTGQAUZJ6YQDI2AVGYIFFPUMMZLKS · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2023-1246 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:3461-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-2004 · Aviso do Fabricante
• https://bugzilla.suse.com/1210419 · Nota