USN-2536-1 — libxfont vulnerabilities

Summary

Ilja van Sprundel, Alan Coopersmith, and William Robinet discovered that
libXfont incorrectly handled malformed bdf fonts. A local attacker could
use this issue to cause libXfont to crash, or possibly execute arbitrary
code in order to gain privileges.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	libxfont	1:1.4.7-1ubuntu0.2

Vulnerabilities 3

Unscored —

CVE-2015-1802

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote …

libxfont libxfont Debian Ubuntu

Mar 20, 2015
Unscored —

CVE-2015-1803

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

libxfont libxfont Debian Ubuntu

Mar 20, 2015
Unscored —

CVE-2015-1804

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

libxfont libxfont Debian Ubuntu

Mar 20, 2015

References

report
https://ubuntu.com/security/CVE-2015-1802
report
https://ubuntu.com/security/CVE-2015-1803
report
https://ubuntu.com/security/CVE-2015-1804

libxfont vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 3

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote …

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

References