Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0209HistoryMay 15, 2014 - 2:55 p.m.
CVE-2014-0209
2014-05-1514:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.6%
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 11 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 10 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 999 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 13 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
Related
prion
prion
Integer overflow
2014-05-15 14:55:00
veracode
veracode
Privilege Escalation
2019-01-15 09:03:21
ubuntucve
ubuntucve
CVE-2014-0209
2014-05-13 00:00:00
cve
cve
CVE-2014-0209
2014-05-15 14:55:00
securityvulns
securityvulns
[oss-security] Fwd: [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont
2014-05-15 00:00:00
[USN-2211-1] libXfont vulnerabilities
2014-05-15 00:00:00
libXfont multiple security vulnerabilities
2014-05-15 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : libXfont (ELSA-2014-1870)
2014-11-21 00:00:00
RHEL 6 / 7 : libXfont (RHSA-2014:1870)
2014-11-19 00:00:00
Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)
2014-05-15 00:00:00
amazon
amazon
Medium: libXfont
2014-09-17 21:44:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-404)
2015-09-08 00:00:00
CentOS Update for libXfont CESA-2014:1870 centos6
2014-11-19 00:00:00
CentOS Update for libXfont CESA-2014:1870 centos7
2014-11-19 00:00:00
f5
f5
debian
debian
[SECURITY] [DSA 2927-1] libxfont security update
2014-05-13 21:51:45
[SECURITY] [DSA 2927-1] libxfont security update
2014-05-13 21:51:25
freebsd
freebsd
libXfont -- X Font Service Protocol and Font metadata file handling issues
2014-05-13 00:00:00
oraclelinux
oraclelinux
libXfont security update
2014-11-24 00:00:00
libXfont security update
2014-11-18 00:00:00
osv
osv
libxfont - security update
2014-05-13 00:00:00
centos
centos
libXfont security update
2014-11-25 11:10:27
libXfont security update
2014-11-18 14:18:34
redhat
redhat
(RHSA-2014:1870) Important: libXfont security update
2014-11-18 00:00:00
(RHSA-2014:1893) Important: libXfont security update
2014-11-24 00:00:00
gentoo
gentoo
libXfont: Multiple vulnerabilities
2014-06-14 00:00:00
mageia
mageia
Updated libxfont packages fix security vulnerabilities
2014-07-04 21:51:51
ubuntu
ubuntu
libXfont vulnerabilities
2014-05-14 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libXfont-1.4.8-1.fc19
2014-07-23 03:01:35
[SECURITY] Fedora 20 Update: libXfont-1.4.8-1.fc20
2014-07-16 02:01:16
[SECURITY] Fedora 20 Update: nx-libs-3.5.0.29-1.fc20
2015-03-26 21:29:40
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.6%
Related for DEBIANCVE:CVE-2014-0209