Debian/libxfont: high 7.1
In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserv
Action: Upgrade libxfont to 1:2.0.1-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.0.1-4 | - |
Fixed versions
| 1:2.0.1-4 |
Sources
- osv: DEBIAN-CVE-2017-13722#Debian:13/libxfont
- https://security-tracker.debian.org/tracker/CVE-2017-13722
published · modified · JSON