543 matches found
Important: libXfont
Issue Overview: A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of...
Amazon Linux 2 : libXfont, --advisory ALAS2-2026-3890 (ALAS-2026-3890)
The version of libXfont installed on the remote host is prior to 1.5.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3890 advisory. A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font...
Linux Distros Unpatched Vulnerability : CVE-2026-59679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but...
Linux Distros Unpatched Vulnerability : CVE-2026-44950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source...
Oracle Linux 10 : libXfont2 (ELSA-2026-47079)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47079 advisory. 2.0.6-5.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves:...
Amazon Linux 2 : libXfont, --advisory ALAS2-2026-3815 (ALAS-2026-3815)
The version of libXfont installed on the remote host is prior to 1.5.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3815 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...
USN-8560-1: libXfont vulnerabilities
It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-56001 It was...
[SECURITY] [DSA 6388-1] libxfont security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2026 https://www.debian.org/security/faq -...
Debian dsa-6388 : libxfont-dev - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6388 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/securit...
Debian dla-4678 : libxfont-dev - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4678 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected]...
[SECURITY] [DLA 4678-1] libxfont security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura July 12, 2026 https://wiki.debian.org/LTS -...
CVE-2026-50256
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...
CVE-2026-50256
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias...
MiracleLinux 4 : libXfont-1.4.5-5.AXS4 (AXSA:2015-460:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-460:01 advisory. The libXfont package provides the X.Org libXfont runtime library. X.Org is an open source implementation of the X Window System. Security issues fixe...
MiracleLinux 3 : libXfont-1.2.2-1.0.5.AXS3 (AXSA:2014-239:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-239:01 advisory. X.Org X11 libXfont runtime library Security issues fied with this release: CVE-2013-6462 Stack-based buffer overflow in the bdfReadCharacters function in...
MiracleLinux 4 : libXfont-1.4.5-3.AXS4 (AXSA:2014-146:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-146:01 advisory. X.Org X11 libXfont runtime library Security issues fixed with this release: CVE-2013-6462 Stack-based buffer overflow in the bdfReadCharacters function in...
EUVD-2007-1349
Malware in sbrugna...
EUVD-2017-5237
Malware in sbrugna...