2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2014-0210" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2014-05-15T14:55:07.323" ,
2024-11-22 19:15:24 +00:00
"lastModified" : "2024-11-21T02:01:38.960" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function."
} ,
{
"lang" : "es" ,
"value" : "M\u00faltiples desbordamientos de buffer en X.Org libXfont anterior a 1.4.8 y 1.4.9x anterior a 1.4.99.901 permiten a servidores remotos de fuentes ejecutar c\u00f3digo arbitrario a trav\u00e9s de una respuesta de protocolo xfs manipulada hacia la funci\u00f3n (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list o (7) fs_read_list_info."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
2024-11-22 19:15:24 +00:00
"baseScore" : 7.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-22 19:15:24 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-119"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "1.4.7" ,
"matchCriteriaId" : "60D58307-30CB-4A71-99EA-8C42329AFFA7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1437F3D-127E-45E7-B678-85BF208BAD30"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "26743145-32B4-45A6-8912-2B97EF59B677"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1C18E74E-DB01-4D5F-BD18-DE370BA56A38"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "06DBC61A-10CD-41ED-AC1B-16C867823059"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "061E16E4-0DD2-45B0-927D-5E6D97D54D9A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "58F3B17A-D8A9-4581-8EAC-4D6498A23F4D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D064C118-DC51-46CF-961E-3D70C1EEFC92"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D9F45C46-F416-46FC-8C98-79D57BB397D6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B21FE78A-41E1-46A7-8129-94CBA34A3FA5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5ADFF46D-9680-410C-B8B8-79F629534465"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D36FBB2E-7BCD-4212-AE04-8C7C6B57CD49"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A603E28-7D58-44FB-819E-5F22FA9860EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2D9EE6A0-89DC-464D-890F-2C0E5CDCFAA4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B056FDAB-4B10-4B32-A942-84864D39CBD6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "642C350E-C81B-46F7-84B4-D3DE45E70DC4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5FC93A4-0138-4293-9C02-504469223399"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "53524431-385B-4FF5-8C5E-4B708099096D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "375B1A11-E0B4-424D-926B-AF3AED0A7D0B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8470304F-5C5A-4260-BEAB-E7F6F81015BB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:x:libxfont:1.4.99:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9EB8EE57-7DE8-4D1D-A227-F9B6510E1E09"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*" ,
"matchCriteriaId" : "7118F616-25CA-4E34-AA13-4D14BB62419F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" ,
"matchCriteriaId" : "F5D324C4-97C7-49D3-A809-9EAD4B690C69"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E2076871-2E80-4605-A470-A41C1A8EC7EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F61F047-129C-41A6-8A27-FFCBB8563E91"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*" ,
"matchCriteriaId" : "B5A6F2F3-4894-4392-8296-3B8DD2679084"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://advisories.mageia.org/MGASA-2014-0278.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.x.org/archives/xorg-announce/2014-May/002431.html" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2014-1893.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://seclists.org/fulldisclosure/2014/Dec/23" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://secunia.com/advisories/59154" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.debian.org/security/2014/dsa-2927" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:145" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/archive/1/534161/100/0/threaded" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/bid/67382" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.ubuntu.com/usn/USN-2211-1" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.vmware.com/security/advisories/VMSA-2014-0012.html" ,
"source" : "secalert@redhat.com"
2024-11-22 19:15:24 +00:00
} ,
{
"url" : "http://advisories.mageia.org/MGASA-2014-0278.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.x.org/archives/xorg-announce/2014-May/002431.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2014-1893.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://seclists.org/fulldisclosure/2014/Dec/23" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://secunia.com/advisories/59154" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.debian.org/security/2014/dsa-2927" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:145" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securityfocus.com/archive/1/534161/100/0/threaded" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securityfocus.com/bid/67382" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.ubuntu.com/usn/USN-2211-1" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.vmware.com/security/advisories/VMSA-2014-0012.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
