https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:42:12.995291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-13720 CVE-2017-13720 2026-10-05T13:42:13.017579+00:00

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.

 https://cve.radiocsirt.org/vuln/usn-3442-1 USN-3442-1 — libxfont, libxfont1, libxfont2 vulnerabilities 2026-10-05T13:42:13.017630+00:00

Affected: Ubuntu:14.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2

It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13720)

It was discovered that libXfont incorrectly handled certain malformed PCF files. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13722)