Red Hat Security AdvisoryRHSA-2014:1893
libXfont security update
Released 2014-11-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libXfont-1.2.2-1.0.6.el5_11, libXfont-1.2.2-1.0.6.el5_11.i386, libXfont-1.2.2-1.0.6.el5_11.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libXfont-1.2.2-1.0.6.el5_11, libXfont-1.2.2-1.0.6.el5_11.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libXfont-1.2.2-1.0.6.el5_11, libXfont-devel-1.2.2-1.0.6.el5_11, libXfont-devel-1.2.2-1.0.6.el5_11.i386
Fixes 3 records
Priority MEDIUM 40
Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary co…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04362 · Published 2014-05-15 · Fixed CWE-189
Priority MEDIUM 40
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0458 · Published 2014-05-15 · Fixed CWE-119
Priority LOW 22
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00444 · Published 2014-05-15 · Fixed CWE-189
THREATIST.IORead the docs