Vulnerability Report

CVE-2017-16611

Title: X Libxfont

Other

Proof Of Concept

No public PoC currently indexed for CVE-2017-16611.

CWE Category CWE-59

Published Date Dec 01, 2017

Modified Date May 13, 2026

Exploit Status Not Found

Score 5.5 CVSS v3.1

Exploit Probability (EPSS)

0.08%

Vulnerability Summary

CVE-2017-16611: In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

Impacted Vendors

x 1

x.org 1

Reference Links

http://security.cucumberlinux.com/security/details.php?id=155 http://www.openwall.com/lists/oss-security/2017/11/28/7 http://www.ubuntu.com/usn/USN-3500-1 https://bugzilla.suse.com/show_bug.cgi?id=1050459 https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2 https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2 https://security.gentoo.org/glsa/201801-10 http://security.cucumberlinux.com/security/details.php?id=155 http://www.openwall.com/lists/oss-security/2017/11/28/7 http://www.ubuntu.com/usn/USN-3500-1 https://bugzilla.suse.com/show_bug.cgi?id=1050459 https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2 https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2 https://security.gentoo.org/glsa/201801-10

CVSS v3.1

Source Entity [email protected]

Severity MEDIUM

5.5

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.9

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:N/I:N/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns