{"schemaVersion":3,"id":"CVE-2022-33068","aliases":["ALPINE-CVE-2022-33068","SUSE-SU-2022:2663-1","SUSE-SU-2022:2664-1","RHSA-2022:8384","UBUNTU-CVE-2022-33068","USN-5524-1","DEBIAN-CVE-2022-33068","openSUSE-SU-2022:2663-1","openSUSE-SU-2024:12168-1"],"status":"published","duplicateOf":null,"title":null,"description":"An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","dates":{"published":"2022-06-22T13:24:42.000Z","modified":"2024-08-03T08:01:19.054Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01189,"percentile":0.67468,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01189},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01189,"percentile":0.67468}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01189,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01189,"percentile":0.67468}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_HARFBUZZ_HARFBUZZ","name":"Harfbuzz","source":"github","url":"https://github.com/harfbuzz/harfbuzz/issues/3557","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"alpine","product":"harfbuzz","name":"harfbuzz","label":"harfbuzz","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/harfbuzz","purlType":"apk","versions":[{"text":"< 4.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"harfbuzz","name":"harfbuzz","label":"harfbuzz","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/harfbuzz","purlType":"deb","versions":[{"text":"< 5.2.0-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.0-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"harfbuzz","name":"harfbuzz","label":"harfbuzz","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/harfbuzz","purlType":"deb","versions":[{"text":"< 2.6.4-1ubuntu4.2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.7.4-1ubuntu3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-1ubuntu4.2 | < 2.7.4-1ubuntu3.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-9","name":"openjdk-9","label":"openjdk-9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qt6-base","name":"qt6-base","label":"qt6-base","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qt6-base","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qtwebengine-opensource-src","name":"qtwebengine-opensource-src","label":"qtwebengine-opensource-src","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qtwebengine-opensource-src","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"35","noFixRecorded":false,"fixedIn":null},{"text":"36","noFixRecorded":false,"fixedIn":null}],"versionsText":"35 | 36","eol":{"isEol":true,"eolDate":"2022-12-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"35","label":"35","eolFrom":"2022-12-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"harfbuzz_project","product":"harfbuzz","name":"harfbuzz","label":"harfbuzz","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.3.0","eol":null,"hubHref":"/vendor/harfbuzz_project/harfbuzz"},{"vendor":"opensuse","product":"harfbuzz&distro=openSUSE Leap 15.3","name":"harfbuzz","label":"harfbuzz&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/harfbuzz&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"harfbuzz&distro=openSUSE Leap 15.4","name":"harfbuzz","label":"harfbuzz&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/harfbuzz&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 3.4.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"harfbuzz&distro=openSUSE Leap Micro 5.2","name":"harfbuzz","label":"harfbuzz&distro=openSUSE Leap Micro 5.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/harfbuzz&distro=openSUSE Leap Micro 5.2","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"harfbuzz&distro=openSUSE Tumbleweed","name":"harfbuzz","label":"harfbuzz&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/harfbuzz&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 4.4.1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.1-1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz","name":"harfbuzz","label":"harfbuzz","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-debuginfo","name":"harfbuzz-debuginfo","label":"harfbuzz-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-debugsource","name":"harfbuzz-debugsource","label":"harfbuzz-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-debugsource","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-devel","name":"harfbuzz-devel","label":"harfbuzz-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-devel","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-devel-debuginfo","name":"harfbuzz-devel-debuginfo","label":"harfbuzz-devel-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-devel-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-icu","name":"harfbuzz-icu","label":"harfbuzz-icu","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-icu","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"harfbuzz-icu-debuginfo","name":"harfbuzz-icu-debuginfo","label":"harfbuzz-icu-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/harfbuzz-icu-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.7.4-8.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.4-8.el9","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Enterprise Storage 7","name":"harfbuzz","label":"harfbuzz&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Micro 5.2","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 3.4.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-BCL","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-BCL","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"harfbuzz","label":"harfbuzz&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Manager Proxy 4.1","name":"harfbuzz","label":"harfbuzz&distro=SUSE Manager Proxy 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Manager Proxy 4.1","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Manager Retail Branch Server 4.1","name":"harfbuzz","label":"harfbuzz&distro=SUSE Manager Retail Branch Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Manager Retail Branch Server 4.1","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"harfbuzz&distro=SUSE Manager Server 4.1","name":"harfbuzz","label":"harfbuzz&distro=SUSE Manager Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/harfbuzz&distro=SUSE Manager Server 4.1","purlType":"rpm","versions":[{"text":"< 2.6.4-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.4-150200.3.3.1","eol":null,"hubHref":null}],"affectedCount":31,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://github.com/harfbuzz/harfbuzz/issues/3557","label":"github.com/harfbuzz/harfbuzz/issues/3557","hostname":"github.com","tags":["X Refsource MISC","Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593","label":"github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593","hostname":"github.com","tags":["X Refsource MISC","Patch","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FQBJ24W6TXLSAQWCFW7IBGUMX4AJI3S4/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQMEXOVDL3T2UXKBCON7JSOCE646G7HG/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56WTC5IY4EIUHVUIHMCXA3BSBZLSZCI/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://security.gentoo.org/glsa/202209-11","label":"security.gentoo.org/glsa/202209-11","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-33068","label":"security.alpinelinux.org/vuln/CVE-2022-33068","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222663-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222663-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1200900","label":"bugzilla.suse.com/1200900","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-33068","label":"www.suse.com/security/cve/CVE-2022-33068","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222664-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222664-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8384","label":"access.redhat.com/errata/RHSA-2022:8384","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102608","label":"bugzilla.redhat.com/show_bug.cgi?id=2102608","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8384.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8384.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-33068","label":"access.redhat.com/security/cve/CVE-2022-33068","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-33068","label":"www.cve.org/CVERecord?id=CVE-2022-33068","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33068","label":"nvd.nist.gov/vuln/detail/CVE-2022-33068","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-33068","label":"ubuntu.com/security/CVE-2022-33068","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5524-1","label":"ubuntu.com/security/notices/USN-5524-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-33068","label":"security-tracker.debian.org/tracker/CVE-2022-33068","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJ2G563AHSBZG4OGZ6WVW7U5ARNA4K5R/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2022:6999","RHSA-2022:7000","RHSA-2022:7012","RHSA-2022:7013"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-06-22T13:24:42.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T08:01:19.054Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:03:37.950Z","stale":false,"partial":false}}