vulnwire
5.5med

CVE-2017-16611

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 36%
Public exploits
0
none known

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

Exploit prediction (EPSS)

0.42% probability of exploitation in the next 30 days, higher than 36% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD2.04.9AV:L/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

  • openwall.com /lists/oss-security/2017/11/28/7 · mailing-list, x_refsource_MLIST, x_transferred
  • bugzilla.suse.com /show_bug.cgi?id=1050459 · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-3500-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • marc.info /?l=freedesktop-xorg-announce&m=151188044218304&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • security.gentoo.org /glsa/201801-10 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • marc.info /?l=freedesktop-xorg-announce&m=151188049718337&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • security.cucumberlinux.com /security/details.php?id=155 · x_refsource_MISC, x_transferred
  • lists.debian.org /debian-lts-announce/2022/01/msg00028.html · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.