ByteOS Network

CVE Vulnerability Details :

CVE-2015-1804

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-20 Mar, 2015 | 14:00

Updated At-06 Aug, 2024 | 04:54

▼CVE Numbering Authority (CNA)

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201507-21	vendor-advisory x_refsource_GENTOO
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html	vendor-advisory x_refsource_SUSE
http://www.ubuntu.com/usn/USN-2536-1	vendor-advisory x_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html	vendor-advisory x_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2015-1708.html	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html	vendor-advisory x_refsource_SUSE
http://www.securitytracker.com/id/1031935	vdb-entry x_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html	vendor-advisory x_refsource_FEDORA
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3194	vendor-advisory x_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2015:145	vendor-advisory x_refsource_MANDRIVA
http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/	x_refsource_MISC
http://advisories.mageia.org/MGASA-2015-0113.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/73279	vdb-entry x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.gentoo.org/glsa/201507-21

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.ubuntu.com/usn/USN-2536-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://rhn.redhat.com/errata/RHSA-2015-1708.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securitytracker.com/id/1031935

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2015/dsa-3194

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2015:145

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/

Resource:

x_refsource_MISC

Hyperlink: http://advisories.mageia.org/MGASA-2015-0113.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/73279

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	x_refsource_CONFIRM x_transferred
https://security.gentoo.org/glsa/201507-21	vendor-advisory x_refsource_GENTOO x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.ubuntu.com/usn/USN-2536-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html	vendor-advisory x_refsource_FEDORA x_transferred
http://rhn.redhat.com/errata/RHSA-2015-1708.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securitytracker.com/id/1031935	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2015/dsa-3194	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2015:145	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/	x_refsource_MISC x_transferred
http://advisories.mageia.org/MGASA-2015-0113.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/73279	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred