Back to Database
Status published
High
CVE-2017-13722
In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2...
Vulnerability Description
In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-13722
Credits & Attribution
No credits recorded in the NVD database.
References
- https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=672bb944311392e2415b39c0d63b1e1902905bcd
- http://www.debian.org/security/2017/dsa-3995
- https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2
- https://security.gentoo.org/glsa/201711-08
- https://bugzilla.redhat.com/show_bug.cgi?id=1500693
- https://bugzilla.suse.com/show_bug.cgi?id=1049692
More from x.org
View All →CVE-2021-31535
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1...
Critical
9.8
CVE-2019-17624
"" In X.Org X Server 1.20.4, there is a stack-based...
High
7.8
CVE-2018-14665
A flaw was found in xorg-x11-server before 1.20.3. An incorrect...
Medium
6.6
CVE-2018-14600
An issue was discovered in libX11 through 1.6.5. The function...
Critical
9.8
CVE-2018-14599
An issue was discovered in libX11 through 1.6.5. The function...
Critical
9.8
Affected Vendor
x.org
View all reports →Affected Software
libxfont
Vulnerable Versions:
0, 2.0.0, 2.0.1
Timeline
Official Publish:
October 11th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.