CVE-2015-1803: Null Pointer Dereference
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1803?
CVE-2015-1803 is considered a high severity vulnerability that can lead to denial of service and potential unauthorized actions.
How do I fix CVE-2015-1803?
To fix CVE-2015-1803, upgrade X.Org libXfont to version 1.4.9 or later.
Which systems are affected by CVE-2015-1803?
CVE-2015-1803 affects specific versions of Ubuntu Linux (10.04, 12.04, 14.04, 14.10) and Debian Linux 7.0.
What types of attacks can CVE-2015-1803 facilitate?
CVE-2015-1803 can facilitate a denial of service attack through a NULL pointer dereference, leading to system crashes.
Are there any known exploits for CVE-2015-1803?
Yes, CVE-2015-1803 can be exploited by remote authenticated users to trigger a crash of the affected service.