libXfont vulnerability

2017-11-2900:00:00

ubuntu.com

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 17.10
Ubuntu 17.04
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

libxfont - X11 font rasterisation library
libxfont1 - X11 font rasterisation library
libxfont2 - X11 font rasterisation library

Details

It was discovered that libXfont incorrectly followed symlinks when opening
font files. A local unprivileged user could use this issue to cause the X
server to access arbitrary files, including special device files.

OSVersionArchitecturePackageVersionFilename
Ubuntu17.10noarchlibxfont1< 1:1.5.2-4ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont1-dbgsym< 1:1.5.2-4ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont1-dev< 1:1.5.2-4ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont2< 1:2.0.1-3ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont-dev< 1:2.0.1-3ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont2-dbgsym< 1:2.0.1-3ubuntu1.1UNKNOWN
Ubuntu17.10noarchlibxfont2-udeb< 1:2.0.1-3ubuntu1.1UNKNOWN
Ubuntu17.04noarchlibxfont1< 1:1.5.2-4ubuntu0.2UNKNOWN
Ubuntu17.04noarchlibxfont1-dbgsym< 1:1.5.2-4ubuntu0.2UNKNOWN
Ubuntu17.04noarchlibxfont1-dev< 1:1.5.2-4ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	17.10	noarch	libxfont1	< 1:1.5.2-4ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont1-dbgsym	< 1:1.5.2-4ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont1-dev	< 1:1.5.2-4ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont2	< 1:2.0.1-3ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont-dev	< 1:2.0.1-3ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont2-dbgsym	< 1:2.0.1-3ubuntu1.1	UNKNOWN
Ubuntu	17.10	noarch	libxfont2-udeb	< 1:2.0.1-3ubuntu1.1	UNKNOWN
Ubuntu	17.04	noarch	libxfont1	< 1:1.5.2-4ubuntu0.2	UNKNOWN
Ubuntu	17.04	noarch	libxfont1-dbgsym	< 1:1.5.2-4ubuntu0.2	UNKNOWN
Ubuntu	17.04	noarch	libxfont1-dev	< 1:1.5.2-4ubuntu0.2	UNKNOWN