Known vulnerabilities in fontforge (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
fontforge (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:fontforge_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
1:20230101~dfsg-8
1:20230101~dfsg-3
1:20230101~dfsg-2
1:20230101~dfsg-1build3
1:20230101~dfsg-1build2
1:20230101~dfsg-1build1
1:20230101~dfsg-1
1:20230101~dfsg-1.1
1:20220308~dfsg-1build1
1:20220308~dfsg-1
1:20201107~dfsg-4build1
1:20201107~dfsg-4
1:20201107~dfsg-4+deb11u1
1:20201107~dfsg-3
1:20201107~dfsg-2
1:20201107~dfsg-1ubuntu1
1:20201107~dfsg-1
1:20190801~dfsg-5ubuntu2
1:20230101~dfsg-4build2
1:20230101~dfsg-4build1
1:20230101~dfsg-4
1:20230101~dfsg-1.1build1
Ubuntu Pro
1:20190801~dfsg-4ubuntu0.1
1:20201107~dfsg-4+deb11u1build0.22.04.1
1:20230101~dfsg-1ubuntu0.1
1:20190801~dfsg-5ubuntu1
1:20190801~dfsg-5
1:20190801~dfsg-2build1
20190801~dfsg
20190801~dfsg-4
20170731~dfsg
20170731~dfsg-1build1
20170731~dfsg-1
20120731.b
0.0.20110222
0.0.20110222-4ubuntu1
1:20190801~dfsg-3
1:20190801~dfsg-4
1:20190801~dfsg-2ubuntu1
1:20190801~dfsg-1
1:20190801~dfsg-2
1:20170731~dfsg-2build1
1:20170731~dfsg-2
1:20170731~dfsg-1build1
20120731.b-7.1ubuntu0.1
1:20170731~dfsg-1
1:20161005~dfsg-4build1
1:2.0.20140101-1
1:20160404~dfsg-1
1:20160404~dfsg-2
1:20160404~dfsg-3
1:20160404~dfsg-4
1:20161005~dfsg-1
1:20161005~dfsg-2
1:20161005~dfsg-3
1:20161005~dfsg-4
1:20161005~dfsg-4ubuntu1
1:20161005~dfsg-4ubuntu2
1:20161005~dfsg-4+deb9u1
1:20161005~dfsg-4+deb9u1ubuntu1
20120731.b-5ubuntu0.1
0.0.20120101+git-1
0.0.20120101+git-2
0.0.20120101+git-3
0.0.20120101+git-4
0.0.20120101+git-5
0.0.20120101+git-6
20161012
20120731.b-7.1build1
20120731.b-7.2build1
20120731.b-7.2
20120731.b-6
20120731.b-7
20120731.b-7.1
20120731.b-5ubuntu1
20120731.b-5build2
20120731.b-5build1
0.0.20040410-1
0.0.20040410.1-1
0.0.20040418-1
0.0.20040425-1
0.0.20040502-1
0.0.20040509-1
0.0.20040523-1
0.0.20040529-1
0.0.20040601-1
0.0.20040618-1
0.0.20040703-1
0.0.20040703-2
0.0.20040808-1
0.0.20040824-1
0.0.20040930-1
0.0.20041012-1
0.0.20041218-0.1
0.0.20050502-1
0.0.20050831-1
0.0.20050831-2
0.0.20050904-1
0.0.20050911-1
0.0.20051205-0.1
0.0.20051205-0.2
0.0.20060430-1
0.0.20060703-1
0.0.20060703.1-1
0.0.20060822-1
0.0.20060822-2
0.0.20061019-1
0.0.20061220-1
0.0.20061220-2
0.0.20070312-1
0.0.20070324-1
0.0.20070501-1
0.0.20070501-2
0.0.20070607-1
0.0.20070607-2
0.0.20070607-3
0.0.20070607-4
0.0.20070831-1
0.0.20070831-2
0.0.20071002-1
0.0.20071110-1
0.0.20080203-1
0.0.20080330-1
0.0.20080330-2
0.0.20080429-1
0.0.20090224-1
0.0.20090224-2
0.0.20090408-1
0.0.20090408-2
0.0.20090622-1
0.0.20090914-1
0.0.20090923-1
0.0.20090923-2
0.0.20100501-1
0.0.20100501-2
0.0.20100501-3
0.0.20100501-4
0.0.20100501-5
0.0.20100501-6
0.0.20110222-1
0.0.20110222-2
0.0.20110222-3
0.0.20110222-4
0.0.20110222-5
0.0.20110222-6
0.0.20110222-7
0.0.20110222-8
0.0.20110222-9
20120731.b-1
20120731.b-2
20120731.b-3
20120731.b-4
20120731.b-5
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100255 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-25081 |
CWE-78 | High | Ubuntu Pro, 1:20190801~dfsg-4ubuntu0.1, 1:20201107~dfsg-4+deb11u1build0.22.04.1, 1:20230101~dfsg-1ubuntu0.1 | 12.11.2024 |
SB2024111277 SB2024111280 SB2024111285 and 8 more |
||
| #VU100254 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-25082 |
CWE-78 | High | Ubuntu Pro, 1:20190801~dfsg-4ubuntu0.1, 1:20201107~dfsg-4+deb11u1build0.22.04.1, 1:20230101~dfsg-1ubuntu0.1 | 12.11.2024 |
SB2024111277 SB2024111280 SB2024111285 and 8 more |