In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libxfont-dev", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont-dev-dbgsym", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont1", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont1-dbg", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont1-dbgsym", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont1-udeb", "binary_version": "1:1.4.7-1ubuntu0.3" }, { "binary_name": "libxfont1-udeb-dbgsym", "binary_version": "1:1.4.7-1ubuntu0.3" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libxfont1", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-dbg", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-dbgsym", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-dev", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-dev-dbgsym", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-udeb", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" }, { "binary_name": "libxfont1-udeb-dbgsym", "binary_version": "1:1.5.1-1ubuntu0.16.04.3" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libxfont-dev", "binary_version": "1:2.0.1-3~ubuntu16.04.2" }, { "binary_name": "libxfont2", "binary_version": "1:2.0.1-3~ubuntu16.04.2" }, { "binary_name": "libxfont2-dbgsym", "binary_version": "1:2.0.1-3~ubuntu16.04.2" }, { "binary_name": "libxfont2-udeb", "binary_version": "1:2.0.1-3~ubuntu16.04.2" }, { "binary_name": "libxfont2-udeb-dbgsym", "binary_version": "1:2.0.1-3~ubuntu16.04.2" } ] }