Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2536-1
HistoryMar 18, 2015 - 12:00 a.m.

libXfont vulnerabilities

2015-03-1800:00:00
ubuntu.com
31

5 Medium

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.8%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • libxfont - X11 font rasterisation library

Details

Ilja van Sprundel, Alan Coopersmith, and William Robinet discovered that
libXfont incorrectly handled malformed bdf fonts. A local attacker could
use this issue to cause libXfont to crash, or possibly execute arbitrary
code in order to gain privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchlibxfont1< 1:1.4.99.901-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchlibxfont-dev< 1:1.4.99.901-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchlibxfont1-dbg< 1:1.4.99.901-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchlibxfont1-udeb< 1:1.4.99.901-1ubuntu0.1UNKNOWN
Ubuntu14.04noarchlibxfont1< 1:1.4.7-1ubuntu0.2UNKNOWN
Ubuntu14.04noarchlibxfont-dev< 1:1.4.7-1ubuntu0.2UNKNOWN
Ubuntu14.04noarchlibxfont1-dbg< 1:1.4.7-1ubuntu0.2UNKNOWN
Ubuntu14.04noarchlibxfont1-udeb< 1:1.4.7-1ubuntu0.2UNKNOWN
Ubuntu12.04noarchlibxfont1< 1:1.4.4-1ubuntu0.3UNKNOWN
Ubuntu12.04noarchlibxfont-dev< 1:1.4.4-1ubuntu0.3UNKNOWN
Rows per page:
1-10 of 151

Related

suse 3
f5 2
nessus 18
amazon 1
openvas 18
redhat 1
securityvulns 3
ibm 3
oraclelinux 1
gentoo 1
mageia 1
kaspersky 2
fedora 2
centos 1
veracode 3
freebsd 1
archlinux 1
debian 2
debiancve 3
ubuntucve 3
cve 3
prion 3
oracle 1
suse
suse
Security update for xorg-x11-libs (important)
2015-04-07 23:04:50
Security update for libXfont (important)
2015-03-27 10:08:20
Security update for libXfont (important)
2015-04-10 11:06:04
f5
f5
K17444 : libXfont vulnerabilities CVE-2015-1802, CVE-2015-1803, and CVE-2015-1804
2015-10-16 00:00:00
SOL17444 - libXfont vulnerabilities CVE-2015-1802, CVE-2015-1803, and CVE-2015-1804
2015-10-16 00:00:00
nessus
nessus
SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 10487)
2015-04-08 00:00:00
GLSA-201507-21 : libXfont: Multiple vulnerabilities
2015-07-23 00:00:00
Fedora 21 : libXfont-1.5.1-1.fc21 (2015-4230)
2015-03-25 00:00:00
amazon
amazon
Important: libXfont
2015-09-22 10:00:00
openvas
openvas
openSUSE: Security Advisory for libXfont (openSUSE-SU-2015:0614-1)
2015-03-28 00:00:00
Gentoo Security Advisory GLSA 201507-21
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2015-0113)
2022-01-28 00:00:00
redhat
redhat
(RHSA-2015:1708) Important: libXfont security update
2015-09-03 00:00:00
securityvulns
securityvulns
libXfont multiple security vulnerabilities
2015-03-18 00:00:00
[USN-2536-1] libXfont vulnerabilities
2015-03-18 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-07-20 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in libXfont affect PowerKVM (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804)
2018-06-18 01:29:25
Security Bulletin: Multiple vulnerabilities in xorg-x11-libs affect IBM Flex System Manager (FSM) (CVE2015-1802, CVE-2015-1803, CVE-2015-1804)
2018-06-18 01:30:10
Security Bulletin: Multiple vulnerabilities in cups, curl, libxfont affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance
2018-06-17 22:30:13
oraclelinux
oraclelinux
libXfont security update
2015-09-03 00:00:00
gentoo
gentoo
libXfont: Multiple vulnerabilities
2015-07-22 00:00:00
mageia
mageia
Updated libxfont package fixes security vulnerabilities
2015-03-24 02:58:37
kaspersky
kaspersky
KLA10478 Denial of service vulnerability in X.Org libXfont
2015-03-20 00:00:00
KLA10630 Multiple vulnerabilities in Oracle VM VirtualBox
2015-07-14 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: libXfont-1.5.1-1.fc22
2015-03-21 05:02:00
[SECURITY] Fedora 21 Update: libXfont-1.5.1-1.fc21
2015-03-23 07:17:22
centos
centos
libXfont security update
2015-09-03 10:17:49
veracode
veracode
Null Pointer Dereference
2019-05-02 05:18:14
Arbitrary Code Execution
2019-05-02 05:18:14
Denial Of Service (DoS)
2019-01-15 09:07:39
freebsd
freebsd
libXfont -- BDF parsing issues
2015-03-17 00:00:00
archlinux
archlinux
libxfont: multiple issues
2015-03-17 00:00:00
debian
debian
[SECURITY] [DLA 183-1] libxfont security update
2015-03-28 17:44:29
[SECURITY] [DSA 3194-1] libxfont security update
2015-03-17 15:38:58
debiancve
debiancve
CVE-2015-1804
2015-03-20 14:59:00
CVE-2015-1803
2015-03-20 14:59:00
CVE-2015-1802
2015-03-20 14:59:00
ubuntucve
ubuntucve
CVE-2015-1803
2015-03-18 00:00:00
CVE-2015-1804
2015-03-18 00:00:00
CVE-2015-1802
2015-03-18 00:00:00
cve
cve
CVE-2015-1803
2015-03-20 14:59:00
CVE-2015-1804
2015-03-20 14:59:00
CVE-2015-1802
2015-03-20 14:59:00
prion
prion
Out-of-bounds
2015-03-20 14:59:00
Null pointer dereference
2015-03-20 14:59:00
Out-of-bounds
2015-03-20 14:59:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

5 Medium

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.8%

JSON
Related for USN-2536-1
suse3f52nessus18amazon1openvas18redhat1securityvulns3ibm3oraclelinux1gentoo1mageia1kaspersky2fedora2centos1veracode3freebsd1archlinux1debian2debiancve3ubuntucve3cve3prion3oracle1