Out-of-bounds read in FreeType - CVE-2022-27406

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU65638

Out-of-bounds read in FreeType - CVE-2022-27406

Published: July 21, 2022 / Updated: July 21, 2022


Vulnerability identifier: #VU65638
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-27406
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the "FT_Request_Size" function. A remote attacker can trigger out-of-bounds read error and cause a denial of service condition on the system.


Affected software

FreeType
Amazon Linux AMI
Oracle Linux
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
Fedora
cflinuxfs3
Dell Data Protection Central
Robotic Process Automation for Cloud Pak
Red Hat OpenShift Serverless
OpenShift Virtualization
Migration Toolkit for Runtimes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Transformation Advisor
Red Hat OpenShift Dev Spaces
App Connect Enterprise Certified Container
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
HPE Moonshot 1500 Chassis Manager
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libfreetype6 (Ubuntu package)
freetype
freetype (Red Hat package)
freetype-help
freetype-devel
freetype-debugsource
freetype-debuginfo
libfreetype6-debuginfo
freetype2-debugsource
libfreetype6
libfreetype6-32bit-debuginfo
libfreetype6-32bit
ftvalid
freetype2-devel
ft2demos
ftbench
ftdiff
ftdump
ftgamma
ftgrid
ftinspect
ftlint
ftmulti
ftstring
ftview
freetype2-devel-32bit
freetype2-profile-tti35
mingw-freetype
media-libs/freetype
Dell EMC VxRail Appliance

How to mitigate CVE-2022-27406

Install updates from vendor's website.

FreeType - update to 2.12.1
cflinuxfs3 - update to 0.312.0
Red Hat OpenShift Serverless - update to 1.26.0
Migration Toolkit for Runtimes - update to 1.0.1
OpenShift API for Data Protection (OADP) - update to 1.1.2
Migration Toolkit for Containers - update to 1.7.6
OpenShift Logging - addressed in versions 5.3.14, 5.5.5
Red Hat Migration Toolkit for Applications - update to 6.0.1
libfreetype6 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.6.10.1ubuntu2.5+esm1, 2.8.1-2ubuntu2.2, 2.10.1-2ubuntu0.2, 2.11.1+dfsg-1ubuntu0.1
freetype - addressed in versions 2.3.11-19.16, 2.12.1-3, 2.13.0-2
Red Hat Advanced Cluster Management for Kubernetes - update to 2.6.3
freetype (Red Hat package) - addressed in versions 2.9.1-5.el8_6.3, 2.9.1-9.el8, 2.10.4-9.el9
freetype-help - update to 2.10.2-4
freetype-devel - update to 2.10.2-4
freetype-debugsource - update to 2.10.2-4
freetype-debuginfo - update to 2.10.2-4
freetype - update to 2.10.2-4
freetype - addressed in versions 2.10.4-6.fc34, 2.11.0-6.fc35, 2.12.1-1.fc36
libfreetype6-debuginfo - update to 2.10.4-150000.4.12.1
freetype2-debugsource - update to 2.10.4-150000.4.12.1
libfreetype6 - update to 2.10.4-150000.4.12.1
libfreetype6-32bit-debuginfo - update to 2.10.4-150000.4.12.1
libfreetype6-32bit - update to 2.10.4-150000.4.12.1
ftvalid - update to 2.10.4-150000.4.12.1
freetype2-devel - update to 2.10.4-150000.4.12.1
ft2demos - update to 2.10.4-150000.4.12.1
ftbench - update to 2.10.4-150000.4.12.1
ftdiff - update to 2.10.4-150000.4.12.1
ftdump - update to 2.10.4-150000.4.12.1
ftgamma - update to 2.10.4-150000.4.12.1
ftgrid - update to 2.10.4-150000.4.12.1
ftinspect - update to 2.10.4-150000.4.12.1
ftlint - update to 2.10.4-150000.4.12.1
ftmulti - update to 2.10.4-150000.4.12.1
ftstring - update to 2.10.4-150000.4.12.1
ftview - update to 2.10.4-150000.4.12.1
freetype2-devel-32bit - update to 2.10.4-150000.4.12.1
freetype2-profile-tti35 - update to 2.10.4-150000.4.12.1
mingw-freetype - addressed in versions 2.11.0-2.fc35, 2.11.1-3.fc36, 2.12.1-1.fc36
media-libs/freetype - update to 2.13.0
IBM Cloud Transformation Advisor - update to 3.4.0
Red Hat OpenShift Dev Spaces - addressed in versions 3.15.0, 3.16.0
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
OpenShift Virtualization - addressed in versions 4.11.1, 4.12.0
Red Hat OpenShift Container Platform - addressed in versions 4.13.45, 4.14.32, 4.14.33
App Connect Enterprise Certified Container - addressed in versions 5.0.2, 6.2.0
Dell EMC VxRail Appliance - addressed in versions 7.0.401, 8.0.000
Dell Data Protection Central - update to 19.9
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1

External References

Related Security Bulletins