According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)

  - The parse_encoding function in type1/t1load.c in     FreeType before 2.5.3 allows remote attackers to cause     a denial of service (infinite loop) via a 'broken     number-with-base' in a Postscript stream, as     demonstrated by 8#garbage.(CVE-2014-9745)

  - In FreeType before 2.6.1, a buffer over-read occurs in     type1/t1parse.c on function T1_Get_Private_Dict where     there is no check that the new values of cur and limit     are sensible before going to Again.(CVE-2015-9290)

  - FreeType before 2.6.1 has a heap-based buffer over-read     in T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)

  - FreeType before 2.6.1 has a buffer over-read in     skip_comment in psaux/psobjs.c because     ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)

  - FreeType before 2.6.2 has a heap-based buffer over-read     in tt_cmap14_validate in sfnt/ttcmap.c.(CVE-2015-9383)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

インストールされているfreetypeパッケージのバージョンによると、リモートホストへのEulerOSのインストールは、次の脆弱性の影響を受けます。- 2.5.3より前のFreeTypeでは、type1/t1load.cのparse_encoding関数により、8＃garbageで示されているように、リモートの攻撃者が、Postscriptストリーム内の 「broken number-with-base」を使用して、サービス拒否（無限ループ）を引き起こす可能性があります。（CVE-2014-9745）- 2.5.4より前のFreeTypeでは、type42/t42parse.cのt42_parse_encoding関数が、immediates-onlyモードの現在の位置を適切に更新しません。このため、リモートの攻撃者がType42フォントを使用してサービス拒否（無限ループ）を引き起こす可能性があります。（CVE-2014-9747）- 2.6.1より前のFreeTypeでは、psaux/psobjs.cのskip_commentにバッファのオーバーリードがあります。これは、ps_parser_skip_PS_tokenがFT_New_Memory_Face操作で誤って処理されるために発生します。（CVE-2015-9382）- 2.6.2より前のFreeTypeでは、sfnt/ttcmap.cのtt_cmap14_validateにヒープベースのバッファオーバーリードがあります。（CVE-2015-9383）- 2.6.1より前のFreeTypeでは、type1/t1parse.cのT1_Get_Private_Dictにヒープベースのバッファオーバーがあります。（CVE-2015-9381）注意：Tenable Network Securityは、前述の記述ブロックをEulerOSセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

根据安装的 freetype 程序包版本，远程主机上的 EulerOS 安装会受到下列漏洞影响：- 在 FreeType 2.5.3 之前的版本中，type1/t1load.c 中的 parse_encoding 函数可让远程攻击者通过 Postscript 流中之“broken number-with-base”造成拒绝服务（无限循环），如 8#garbage 所示。(CVE-2014-9745) - 在 FreeType 2.5.4 之前的版本中，type42/t42parse.c 中的 t42_parse_encoding 函数未正确更新 immediates-only 模式的目前位置，这可让远程攻击者通过 Type42 字体造成拒绝服务（无限循环）。(CVE-2014-9747) - 在 FreeType 2.6.1 之前的版本中，因在 FT_New_Memory_Face 操作中不当处理 ps_parser_skip_PS_token，而使 psaux/psobjs.c 的 skip_comment 中有缓冲区过度读取。(CVE-2015-9382) - 在 FreeType 2.6.2 之前的版本中，sfnt/ttcmap.c 的 tt_cmap14_validate 中有基于堆的缓冲区过度读取。(CVE-2015-9383) - 在 FreeType 2.6.1 之前的版本中，type1/t1parse.c 的 T1_Get_Private_Dict 中有基于堆的缓冲区过度读取。(CVE-2015-9381) 请注意，Tenable Network Security 已直接从 EulerOS 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

根據安裝的 freetype 套件版本，遠端主機上的 EulerOS 安裝會受到下列弱點影響：- 在 FreeType 2.5.3 之前的版本中，type1/t1load.c 中的 parse_encoding 函式可讓遠端攻擊者透過 Postscript 串流中之「broken number-with-base」造成拒絕服務 (無限迴圈)，如 8#garbage 所示。(CVE-2014-9745) - 在 FreeType 2.5.4 之前的版本中，type42/t42parse.c 中的 t42_parse_encoding 函式未正確更新 immediates-only 模式的目前位置，這可讓遠端攻擊者透過 Type42 字型造成拒絕服務 (無限迴圈)。(CVE-2014-9747) - 在 FreeType 2.6.1 之前的版本中，因在 FT_New_Memory_Face 作業中不當處理 ps_parser_skip_PS_token，而使 psaux/psobjs.c 的 skip_comment 中有緩衝區過度讀取。(CVE-2015-9382) - 在 FreeType 2.6.2 之前的版本中，sfnt/ttcmap.c 的 tt_cmap14_validate 中有堆積型緩衝區過度讀取。(CVE-2015-9383) - 在 FreeType 2.6.1 之前的版本中，type1/t1parse.c 的 T1_Get_Private_Dict 中有堆積型緩衝區過度讀取。(CVE-2015-9381) 請注意，Tenable Network Security 已直接從 EulerOS 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

FreeTypeが特定のフォントファイルを不適切に処理することがわかりました。攻撃者がこの問題を悪用して、秘密情報にアクセスする可能性があります。

注意: Tenable Network Security は、前述の説明ブロックをUbuntuセキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

FreeType 2フォントエンジンで、いくつかの新たに参照された問題が修正されました。

CVE-2015-9381

type1/t1parse.cのT1_Get_Private_Dictにおけるヒープベースのバッファオーバーリード

CVE-2015-9382

FT_New_Memory_Face操作でps_parser_skip_PS_tokenが不適切に処理されるため、psaux/psobjs.cのskip_commentにバッファオーバーリードが存在します。

CVE-2015-9383

sfnt/ttcmap.c内のtt_cmap14_validateのヒープベースのバッファオーバーリード

Debian 8「Jessie」では、これらの問題はバージョン2.5.2-3+deb8u4で修正されました。

freetypeパッケージをアップグレードすることをお勧めします。

注: Tenable Network Securityは、前述の記述ブロックをDLAセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

发现 FreeType 未能正确处理某些字体文件。攻击者可能利用此问题访问敏感信息。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行了自动清理和排版。

FreeType 2 字体引擎中修复了多个新引用的问题。CVE-2015-9381 type1/t1parse.c 的 T1_Get_Private_Dict 中存在基于堆的缓冲区过度读取 CVE-2015-9382 由于 FT_New_Memory_Face 操作中未正确处理 ps_parser_skip_PS_token，因此 psaux/psobjs.c 的 skip_comment 中存在缓冲区过度读取 CVE-2015-9383 sfnt/ttcmap.c 的 tt_cmap14_validate 中存在基于堆的缓冲区过度读取 对于 Debian 8“Jessie”，这些问题已在 2.5.2-3+deb8u4 版本中修复。建议您升级 freetype 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

據發現，FreeType 未正確處理某些字型檔案。攻擊者可能會利用此問題來存取敏感資訊。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

已修正 FreeType 2 字型引擎中數個新參照的問題。CVE-2015-9381 在 type1/t1parse.c 的 T1_Get_Private_Dict 中存在堆積型緩衝區過度讀取。CVE-2015-9382 在 psaux/psobjs.c 的 skip_comment 中存在緩衝區過度讀取，因為在 FT_New_Memory_Face 作業中未正確處理 ps_parser_skip_PS_token。CVE-2015-9383 在 sfnt/ttcmap.c 的 tt_cmap14_validate 中存在堆積型緩衝區過度讀取。針對 Debian 8「Jessie」，此問題已在版本 2.5.2-3+deb8u4 中修正。建議您升級 freetype 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

It was discovered that FreeType incorrectly handled certain font files. An attacker could possibly use this issue to access sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freetype package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The FreeType engine is a free and portable font     rendering engine, developed to provide advanced font     support for a variety of platforms and environments.
    FreeType is a library which can open and manages font     files as well as efficiently load, hint and render     individual glyphs. FreeType is not a font server or a     complete text-rendering library. Security Fix(es):The     t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)In Sudo before     1.8.28, an attacker with access to a Runas ALL sudoer     account can bypass certain policy blacklists and     session PAM modules, and can cause incorrect logging,     by invoking sudo with a crafted user ID. For example,     this allows bypass of !root configuration, and USER=     logging, for a 'sudo -u \#$((0xffffffff))'     command.(CVE-2015-9383)FreeType before 2.6.1 has a     buffer over-read in skip_comment in psaux/psobjs.c     because ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)FreeType     before 2.6.1 has a heap-based buffer over-read in     T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)In FreeType before     2.6.1, a buffer over-read occurs in type1/t1parse.c on     function T1_Get_Private_Dict where there is no check     that the new values of cur and limit are sensible     before going to Again.(CVE-2015-9290)The parse_encoding     function in type1/t1load.c in FreeType before 2.5.3     allows remote attackers to cause a denial of service     (infinite loop) via a 'broken number-with-base' in a     Postscript stream, as demonstrated by     8#garbage.(CVE-2014-9745)The parse_charstrings function     in type1/t1load.c in FreeType 2 before 2.7 does not     ensure that a font contains a glyph name, which allows     remote attackers to cause a denial of service     (heap-based buffer over-read) or possibly have     unspecified other impact via a crafted     file.(CVE-2016-10244)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several newly-referenced issues have been fixed in the FreeType 2 font engine.

CVE-2015-9381

heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c

CVE-2015-9382

buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation

CVE-2015-9383

a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c

For Debian 8 'Jessie', these problems have been fixed in version 2.5.2-3+deb8u4.

We recommend that you upgrade your freetype packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)

  - FreeType before 2.6.2 has a heap-based buffer over-read     in tt_cmap14_validate in sfnt/ttcmap.c.(CVE-2015-9383)

  - FreeType before 2.6.1 has a buffer over-read in     skip_comment in psaux/psobjs.c because     ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)

  - FreeType before 2.6.1 has a heap-based buffer over-read     in T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)

  - In FreeType before 2.6.1, a buffer over-read occurs in     type1/t1parse.c on function T1_Get_Private_Dict where     there is no check that the new values of cur and limit     are sensible before going to Again.(CVE-2015-9290)

  - The parse_encoding function in type1/t1load.c in     FreeType before 2.5.3 allows remote attackers to cause     a denial of service (infinite loop) via a 'broken     number-with-base' in a Postscript stream, as     demonstrated by 8#garbage.(CVE-2014-9745)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The parse_encoding function in type1/t1load.c in     FreeType before 2.5.3 allows remote attackers to cause     a denial of service (infinite loop) via a 'broken     number-with-base' in a Postscript stream, as     demonstrated by 8#garbage.(CVE-2014-9745)

  - The t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)

  - FreeType before 2.6.1 has a buffer over-read in     skip_comment in psaux/psobjs.c because     ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)

  - FreeType before 2.6.2 has a heap-based buffer over-read     in tt_cmap14_validate in sfnt/ttcmap.c.(CVE-2015-9383)

  - FreeType before 2.6.1 has a heap-based buffer over-read     in T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The parse_encoding function in type1/t1load.c in     FreeType before 2.5.3 allows remote attackers to cause     a denial of service (infinite loop) via a 'broken     number-with-base' in a Postscript stream, as     demonstrated by 8#garbage.(CVE-2014-9745)

  - The t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)

  - FreeType before 2.6.1 has a heap-based buffer over-read     in T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)

  - FreeType before 2.6.1 has a buffer over-read in     skip_comment in psaux/psobjs.c because     ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)

  - FreeType before 2.6.2 has a heap-based buffer over-read     in tt_cmap14_validate in sfnt/ttcmap.c.(CVE-2015-9383)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
130857	EulerOS 2.0 SP5 : freetype (EulerOS-SA-2019-2148)	Nessus	Huawei Local Security Checks	2019/11/12	2024/4/12	critical
131667	EulerOS 2.0 SP2：freetype（EulerOS-SA-2019-2514）	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
131667	EulerOS 2.0 SP2：freetype (EulerOS-SA-2019-2514)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
131667	EulerOS 2.0 SP2：freetype (EulerOS-SA-2019-2514)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
128630	Ubuntu 16.04 LTS: FreeType の脆弱性 (USN-4126-1)	Nessus	Ubuntu Local Security Checks	2019/9/10	2023/10/23	medium
128509	DebianDLA-1909-1: freetype - セキュリティ更新プログラム	Nessus	Debian Local Security Checks	2019/9/5	2024/4/29	high
128630	Ubuntu 16.04 LTS：FreeType 漏洞 (USN-4126-1)	Nessus	Ubuntu Local Security Checks	2019/9/10	2023/10/23	medium
128509	Debian DLA-1909-1：freetype 安全更新	Nessus	Debian Local Security Checks	2019/9/5	2024/4/29	high
128630	Ubuntu 16.04 LTS：FreeType 弱點 (USN-4126-1)	Nessus	Ubuntu Local Security Checks	2019/9/10	2023/10/23	medium
128509	Debian DLA-1909-1：freetype 安全性更新	Nessus	Debian Local Security Checks	2019/9/5	2024/4/29	high
128630	Ubuntu 16.04 LTS : FreeType vulnerability (USN-4126-1)	Nessus	Ubuntu Local Security Checks	2019/9/10	2023/10/23	medium
134513	EulerOS Virtualization for ARM 64 3.0.2.0 : freetype (EulerOS-SA-2020-1224)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	critical
128509	Debian DLA-1909-1 : freetype security update	Nessus	Debian Local Security Checks	2019/9/5	2024/4/29	high
135653	EulerOS Virtualization 3.0.2.2 : freetype (EulerOS-SA-2020-1491)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	critical
131667	EulerOS 2.0 SP2 : freetype (EulerOS-SA-2019-2514)	Nessus	Huawei Local Security Checks	2019/12/4	2024/4/8	high
132298	EulerOS 2.0 SP3 : freetype (EulerOS-SA-2019-2581)	Nessus	Huawei Local Security Checks	2019/12/19	2024/4/3	high

偵測

搜尋 Plugin

critical

high

high

high

medium

high

medium

high

medium

high

medium

critical

high

critical

high

high