Lucene search

K
oraclelinuxOracleELSA-2014-1870
HistoryNov 18, 2014 - 12:00 a.m.

libXfont security update

2014-11-1800:00:00
Oracle
linux.oracle.com
8

0.025 Low

EPSS

Percentile

89.0%

[1.4.5-4]

  • CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  • CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  • CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)