CVE-2014-9661: canonical ubuntu_linux
Vulnerability summary
CVE-2014-9661 is a high (CVSS 7.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.36% chance of exploitation in the next 30 days, higher than 91.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 8 · Related 4Timeline
- 08-02-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.36%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.36% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (code.google.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat6 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_hpc_node6 | 7.0
- enterprise_linux_hpc_node_eus7.1
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_eus6.6z | 7.1
Debian2 products
- freetype< 2.5.2-3
- debian_linuxEOL7.0
Canonical1 product
- ubuntu_linuxEOL10.04 | 12.04 | 14.04 | 14.10 | 15.04
Fedoraproject1 product
- fedoraEOL20 | 21
Freetype1 product
- freetype≤ 2.5.3
Opensuse1 product
- opensuseEOL13.1 | 13.2
Ubuntu1 product
- freetype< 2.5.2-1ubuntu2.4
7 vendors · 13 products
References
20 links
- advisories.mageia.org/MGASA-2015-0083.htmlX Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlX Refsource CONFIRM
Show all 20 references
- lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.htmlVendor AdvisoryX Refsource FEDORA