REDHAT-BUG-1500693: Low severity red hat libxfont vulnerability
It was discovered that libXfont incorrectly handled certain malformed PCF files. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information.
Upstream patch:
https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=672bb944311392e2415b39c0d63b1e1902905bcd
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1500693?
The severity of REDHAT-BUG-1500693 is classified as a denial of service vulnerability that can potentially lead to crashes or information disclosure.
How do I fix REDHAT-BUG-1500693?
To fix REDHAT-BUG-1500693, you should apply the official updates or patches provided by the X.Org libXfont project.
Who can exploit REDHAT-BUG-1500693?
A local attacker can exploit REDHAT-BUG-1500693 by deliberately crafting malformed PCF files.
What are the potential impacts of REDHAT-BUG-1500693?
The potential impacts of REDHAT-BUG-1500693 include denial of service through crashing of libXfont and possible exposure of sensitive information.
What versions of libXfont are affected by REDHAT-BUG-1500693?
REDHAT-BUG-1500693 affects versions of libXfont that do not incorporate the necessary security patch.