An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files     containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on     the heap, causing the application to crash or execute arbitrary code. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-25690)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:4844 advisory.

  - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files     containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on     the heap, causing the application to crash or execute arbitrary code. The highest threat from this     vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-25690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4844 advisory.

  - fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for fontforge fixes the following issues :

  - fix for Use-after-free (heap) in the     SFD_GetFontMetaData() function and the crash     (bsc#1178308 CVE-2020-25690).

This update was imported from the SUSE:SLE-15:Update update project.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:4844 advisory.

    FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including     PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed     fonts.

    Security Fix(es):

    * fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
252688	Linux Distros Unpatched Vulnerability : CVE-2020-25690	Nessus	Misc.	high
157687	AlmaLinux 8 : fontforge (ALSA-2020:4844)	Nessus	Alma Linux Local Security Checks	high
145891	CentOS 8 : fontforge (CESA-2020:4844)	Nessus	CentOS Local Security Checks	high
143504	openSUSE Security Update : fontforge (openSUSE-2020-2111)	Nessus	SuSE Local Security Checks	high
142415	RHEL 8 : fontforge (RHSA-2020:4844)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-25690

high

Tenable Plugins

high

high

high

high

high