CVE-2015-1804: x libxfont Numeric Errors

EPSS trend

Probability

4.96%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.96% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

26 links

www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlX Refsource CONFIRM
security.gentoo.org/glsa/201507-21Vendor AdvisoryX Refsource GENTOO
lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-updates/2015-12/msg00074.htmlVendor AdvisoryX Refsource SUSE
www.ubuntu.com/usn/USN-2536-1Vendor AdvisoryX Refsource UBUNTU
lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.htmlVendor AdvisoryX Refsource FEDORA
rhn.redhat.com/errata/RHSA-2015-1708.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.htmlVendor AdvisoryX Refsource SUSE
www.securitytracker.com/id/1031935VDB EntryX Refsource SECTRACK
lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.htmlVendor AdvisoryX Refsource FEDORA

Show all 26 references

www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlX Refsource CONFIRM
www.debian.org/security/2015/dsa-3194Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDVSA-2015:145Vendor AdvisoryX Refsource MANDRIVA
www.x.org/wiki/Development/Security/Advisory-2015-03-17/X Refsource MISCVendor Advisory
advisories.mageia.org/MGASA-2015-0113.htmlX Refsource CONFIRM
www.securityfocus.com/bid/73279VDB EntryX Refsource BID
lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.htmlVendor AdvisoryX Refsource SUSE
www.suse.com/support/update/announcement//suse-ru-20152393-1/Advisory
bugzilla.suse.com/958383REPORT
www.suse.com/security/cve/CVE-2015-1804WEB
www.suse.com/support/update/announcement//suse-ru-20160031-1/Advisory
ubuntu.com/security/CVE-2015-1804REPORT
www.openwall.com/lists/oss-security/2015/03/17/5REPORT
ubuntu.com/security/notices/USN-2536-1Advisory
www.cve.org/CVERecord?id=CVE-2015-1804REPORT
security-tracker.debian.org/tracker/CVE-2015-1804Advisory

Related vulnerabilities

CVE-2013-6462debianlibxfont+510.25%12y ago09-01-2014 15:00Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.CVE-2015-1803canonicalubuntu_linux+44.90%11y ago20-03-2015 14:00The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.CVE-2015-1802debianlibxfont+24.90%11y ago20-03-2015 14:00The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.CVE-2007-5199debianlibxfont+12.21%9y ago18-08-2017 20:00A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.CVE-2014-0209canonicalubuntu_linux+30.44%12y ago15-05-2014 14:00Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.CVE-2014-0211canonicalubuntu_linux+34.36%12y ago15-05-2014 14:00Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.

All vulnerabilities inlibxfont

CVE-2015-1804: x libxfont Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References