CVE-2015-1803

Published: Mar 20, 2015Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.

Affected (7)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · X: Libxfont

1 product

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Debian Debian Linux	Version 7.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
X Libxfont	Up to 1.4.8
X Libxfont	Version 1.5.0

References (32)

http://advisories.mageia.org/MGASA-2015-0113.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1708.html

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3194

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:145

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/73280

Source: secalert@redhat.com

http://www.securitytracker.com/id/1031935

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2536-1

Source: secalert@redhat.com

http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

Source: secalert@redhat.com

Vendor Advisory

https://security.gentoo.org/glsa/201507-21

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2015-0113.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1708.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3194

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/73280

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031935

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2536-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.gentoo.org/glsa/201507-21

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.