CVE-2015-1804: High severity X libXfont vulnerability
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1804?
CVE-2015-1804 is considered a medium severity vulnerability due to its potential for causing a denial of service and executing arbitrary code.
How do I fix CVE-2015-1804?
To fix CVE-2015-1804, you should upgrade X.Org libXfont to version 1.4.9 or later, or to version 1.5.1 or later.
Which versions of libXfont are affected by CVE-2015-1804?
CVE-2015-1804 affects X.Org libXfont versions before 1.4.9 and 1.5.0.
What are the potential consequences of CVE-2015-1804?
The potential consequences of CVE-2015-1804 include denial of service and possible execution of arbitrary code due to out-of-bounds memory access.
How can remote authenticated users exploit CVE-2015-1804?
Remote authenticated users can exploit CVE-2015-1804 by sending specially crafted metrics values that trigger the vulnerability in libXfont.