NetSight
IP …
medium5.5

CVE-2017-16611

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, …

Impact

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04, 17.10
XLibxfont
from 1.0.0 before 1.5.4
from 2.0.0 before 2.0.3

Weakness classification

CWE-59

References