Description
In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.openwall.com/lists/oss-security/2017/11/28/7 ↗
- https://bugzilla.suse.com/show_bug.cgi?id=1050459 ↗
- http://www.ubuntu.com/usn/USN-3500-1 ↗
- https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2 ↗
- https://security.gentoo.org/glsa/201801-10 ↗
- https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2 ↗
- http://security.cucumberlinux.com/security/details.php?id=155 ↗
- https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html ↗