CVE-2013-6462
libxfont - buffer overflow
EPSS 10.3%
描述
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
如何修補 CVE-2013-6462
要修補 CVE-2013-6462,請將受影響套件升級到下列已修補版本。
- Debian/libxfont—升級至 1:1.4.7-1 或更新版本
- Debian/libxfont—升級至 1:1.4.1-4 或更新版本
CVE-2013-6462 正在被利用嗎?
中等 — EPSS 為 10.3%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 1:1.4.7-1
- from 0, < 1:1.4.1-4