Описание
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.0.8-1 |
| esm-infra-legacy/trusty | released | 1:1.4.7-1ubuntu0.4+esm2 |
| esm-infra-legacy/xenial | released | 1:1.5.1-1ubuntu0.16.04.4+esm2 |
| esm-infra/bionic | released | 1:2.0.3-1ubuntu0.1~esm2 |
| esm-infra/focal | released | 1:2.0.3-1ubuntu0.20.04.1~esm2 |
| jammy | released | 1:2.0.5-1ubuntu0.2 |
| noble | released | 1:2.0.6-1+deb13u1build0.24.04.2 |
| questing | ignored | end of life, was needs-triage |
| resolute | released | 1:2.0.6-2ubuntu0.2 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/xenial | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
EPSS
8.5 High
CVSS3
Связанные уязвимости
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
A heap bufferflow in pcfReadFont() due to missing glyph bounds checkin ...
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
EPSS
8.5 High
CVSS3