X.org Libxfont vulnerabilities

4 CVEs affecting X.org Libxfont, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-13722, published 2017-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1351, published 2007-04-06. High severity, CVSS 8.5. EPSS: 5.6% chance of exploitation in the next 30 days. Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code…
CVE-2007-1352, published 2007-04-06. Low severity, CVSS 3.8. EPSS: 1.5% chance of exploitation in the next 30 days. Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which…
CVE-2017-13720, published 2017-10-11. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of…
CVE-2017-13722, published 2017-10-11. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an…