CVE-2015-1803: canonical ubuntu_linux
Vulnerability summary
CVE-2015-1803 is a high (CVSS 8.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.90% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 6 · Related 2Timeline
- 20-03-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.90%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.90% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- libxfont< 1:1.5.1-1
- debian_linuxEOL7.0
Canonical1 product
- ubuntu_linuxEOL10.04 | 12.04 | 14.04 | 14.10
Ubuntu1 product
- libxfont< 1:1.4.7-1ubuntu0.2
X1 product
- libxfont≤ 1.4.8 | 1.5.0
4 vendors · 5 products
References
21 links- www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlX Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.htmlVendor AdvisoryX Refsource FEDORA
- www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlX Refsource CONFIRM
Show all 21 references
- advisories.mageia.org/MGASA-2015-0113.htmlX Refsource CONFIRM