CVE-2015-1804 The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated...
HighCVSS 8.5
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxfont(Debian:12) | < 1:1.5.1-1 | 1:1.5.1-1 |
| debian/libxfont(Debian:13) | < 1:1.5.1-1 | 1:1.5.1-1 |
| debian/libxfont(Debian:14) | < 1:1.5.1-1 | 1:1.5.1-1 |
| x libxfont | <= 1.4.8 | No fix listed |
| x libxfont | = 1.5.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-1804 vendor-advisory
- advisories.mageia.org
- FEDORA-2015-4199 vendor-advisory
- FEDORA-2015-4230 vendor-advisory
- openSUSE-SU-2015:0614 vendor-advisory
- SUSE-SU-2015:0674 vendor-advisory
- SUSE-SU-2015:0702 vendor-advisory
- openSUSE-SU-2015:2300 vendor-advisory
- RHSA-2015:1708 vendor-advisory
- DSA-3194 vendor-advisory
- MDVSA-2015:145 vendor-advisory
- www.oracle.com
- www.oracle.com
- 73279 vdb-entry
- 1031935 vdb-entry
- USN-2536-1 vendor-advisory
- www.x.org vendor-advisory
- GLSA-201507-21 vendor-advisory