CVE-2017-13720

🗓️ 11 Oct 2017 17:00:29Reported by mitreType

Buffer over-read in fontfile/fontdir.c in libXfont leading to information disclosure or denial of service

Reporter	Title	Published	Views	Family All 56
OSV	CVE-2017-13720	11 Oct 201717:29	–	osv
OSV	libxfont - security update	7 Oct 201700:00	–	osv
OSV	libxfont - security update	10 Oct 201700:00	–	osv
OSV	libXfont-devel-1.5.4-2.18 on GA media	15 Jun 202400:00	–	osv
Debian CVE	CVE-2017-13720	11 Oct 201717:29	–	debiancve
RedhatCVE	CVE-2017-13720	22 Jan 201822:58	–	redhatcve
Cvelist	CVE-2017-13720	11 Oct 201717:00	–	cvelist
Veracode	Denial Of Service (DoS)	6 Dec 201801:09	–	veracode
Prion	Information disclosure	11 Oct 201717:29	–	prion
NVD	CVE-2017-13720	11 Oct 201717:29	–	nvd

Nvd

Node

x.org libxfontRange≤1.5.2

x.org libxfontMatch2.0.0

x.org libxfontMatch2.0.1

Source	Link
security	www.security.gentoo.org/glsa/201711-08
debian	www.debian.org/security/2017/dsa-3995
cgit	www.cgit.freedesktop.org/xorg/lib/libXfont/commit/
bugzilla	www.bugzilla.suse.com/show_bug.cgi
x	www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Oct 2017 17:29Current

5.9Medium risk

Vulners AI Score5.9

CVSS23.6

CVSS37.1

EPSS0.001

CWE-125