https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:32:17 +0000 https://cve.radiocsirt.org/vuln/cve-2017-13720 <p>In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because &#39;\0&#39; characters are incorrectly skipped in situations involving ? characters.</p> <p>In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because &#39;\0&#39; characters are incorrectly skipped in situations involving ? characters.</p> https://cve.radiocsirt.org/vuln/cve-2017-13720 https://cve.radiocsirt.org/vuln/usn-3442-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2</p> <p>It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13720)</p> <p>It was discovered that libXfont incorrectly handled certain malformed PCF files. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13722)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2</p> <p>It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13720)</p> <p>It was discovered that libXfont incorrectly handled certain malformed PCF files. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-13722)</p> https://cve.radiocsirt.org/vuln/usn-3442-1