Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0211HistoryMay 15, 2014 - 2:55 p.m.
CVE-2014-0211
2014-05-1514:55:00
Debian Security Bug Tracker
security-tracker.debian.org
10
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
89.8%
Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 11 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 10 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 999 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
| Debian | 13 | all | libxfont | < 1:1.4.7-2 | libxfont_1:1.4.7-2_all.deb |
Related
cve
cve
CVE-2014-0211
2014-05-15 14:55:00
prion
prion
Integer overflow
2014-05-15 14:55:00
veracode
veracode
Remote Code Execution (RCE)
2018-12-08 04:30:11
ubuntucve
ubuntucve
CVE-2014-0211
2014-05-13 00:00:00
securityvulns
securityvulns
[oss-security] Fwd: [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont
2014-05-15 00:00:00
[USN-2211-1] libXfont vulnerabilities
2014-05-15 00:00:00
libXfont multiple security vulnerabilities
2014-05-15 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : libXfont (ELSA-2014-1870)
2014-11-21 00:00:00
RHEL 6 / 7 : libXfont (RHSA-2014:1870)
2014-11-19 00:00:00
Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)
2014-05-15 00:00:00
amazon
amazon
Medium: libXfont
2014-09-17 21:44:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-404)
2015-09-08 00:00:00
CentOS Update for libXfont CESA-2014:1870 centos6
2014-11-19 00:00:00
Debian Security Advisory DSA 2927-1 (libxfont - security update)
2014-05-13 00:00:00
debian
debian
[SECURITY] [DSA 2927-1] libxfont security update
2014-05-13 21:51:25
[SECURITY] [DSA 2927-1] libxfont security update
2014-05-13 21:51:45
redhat
redhat
(RHSA-2014:1870) Important: libXfont security update
2014-11-18 00:00:00
(RHSA-2014:1893) Important: libXfont security update
2014-11-24 00:00:00
oraclelinux
oraclelinux
libXfont security update
2014-11-18 00:00:00
libXfont security update
2014-11-24 00:00:00
gentoo
gentoo
libXfont: Multiple vulnerabilities
2014-06-14 00:00:00
mageia
mageia
Updated libxfont packages fix security vulnerabilities
2014-07-04 21:51:51
ubuntu
ubuntu
libXfont vulnerabilities
2014-05-14 00:00:00
f5
f5
freebsd
freebsd
libXfont -- X Font Service Protocol and Font metadata file handling issues
2014-05-13 00:00:00
osv
osv
libxfont - security update
2014-05-13 00:00:00
centos
centos
libXfont security update
2014-11-25 11:10:27
libXfont security update
2014-11-18 14:18:34
fedora
fedora
[SECURITY] Fedora 19 Update: libXfont-1.4.8-1.fc19
2014-07-23 03:01:35
[SECURITY] Fedora 20 Update: libXfont-1.4.8-1.fc20
2014-07-16 02:01:16
[SECURITY] Fedora 21 Update: nx-libs-3.5.0.29-1.fc21
2015-03-26 21:51:39
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
89.8%
Related for DEBIANCVE:CVE-2014-0211