CVE-2015-1804

Published: Mar 20, 2015Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

Affected (2)

Products: X: Libxfont

1 product

Configuration A

2 vulnerable · 5 platform

Vulnerable Software	Affected Versions
X Libxfont	Up to 1.4.8
X Libxfont	Version 1.5.0

Running on/with	Platform Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Debian Debian Linux	Version 7.0

Related CWEs

References (34)

http://advisories.mageia.org/MGASA-2015-0113.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1708.html

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3194

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:145

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/73279

Source: secalert@redhat.com

http://www.securitytracker.com/id/1031935

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2536-1

Source: secalert@redhat.com

http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

Source: secalert@redhat.com

Vendor Advisory

https://security.gentoo.org/glsa/201507-21

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2015-0113.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1708.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3194

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/73279

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031935

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2536-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.gentoo.org/glsa/201507-21

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.