Detections
Analytics
Scientific Linux Security Update : libXfont on SL6.x, SL7.x i386/x86_64 (20150903)
high Nessus Plugin ID 85788
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. (CVE-2015-1802)An integer truncation flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. (CVE-2015-1804)
A NULL pointer dereference flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could use this flaw to crash the X.Org server.
(CVE-2015-1803)
Solution
Update the affected libXfont, libXfont-debuginfo and / or libXfont-devel packages.See Also
Plugin Details
Severity: High
ID: 85788
File Name: sl_20150903_libXfont_on_SL6_x.nasl
Version: 1.4
Type: local
Agent: unix
Published: 9/4/2015
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 8.5
Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:libxfont, p-cpe:/a:fermilab:scientific_linux:libxfont-debuginfo, p-cpe:/a:fermilab:scientific_linux:libxfont-devel, x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 9/3/2015
Vulnerability Publication Date: 3/20/2015