جزئیات آسیبپذیری
CVE-2026-44950
SUSE Container suse/kiosk/tigervnc-x11vncSUSE Container suse/kiosk/xorgSUSE Image SLES-SAP-AzureSUSE Image SLES-SAP-Azure-3PSUSE Image SLES-SAP-BYOS-AzureSUSE Image SLES-SAP-BYOS-EC2
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
CVSS 4.0
9.5بحرانی
شرح رسمی (انگلیسی)
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation. A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.5بحرانی | 4.0 | CVEProject cvelistV5 (CNA) (suse) | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| 9.0بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (suse) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| SUSE | Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Container suse/kiosk/xorg:21.1-83.7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-Azure | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-Azure-3P | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-BYOS-Azure | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-BYOS-EC2 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-BYOS-GCE | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-GCE | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAP-GCE-3P | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES-SAPCAL-GCE | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-Azure-SAP-BYOS | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-Azure-SAP-On-Demand | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-EC2-SAP-BYOS | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-EC2-SAP-On-Demand | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-GCE-SAP-BYOS | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES12-SP5-GCE-SAP-On-Demand | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Azure-3P | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-BYOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-BYOS-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-BYOS-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-BYOS-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-BYOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-BYOS-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-BYOS-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-BYOS-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAP-Hardened-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAPCAL | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAPCAL-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAPCAL-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP6-SAPCAL-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Azure-3P | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-BYOS-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-BYOS-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-BYOS-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-GCE-3P | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Hardened-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Hardened-BYOS-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Hardened-BYOS-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Hardened-BYOS-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAP-Hardened-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAPCAL-Azure | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAPCAL-EC2 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | Image SLES15-SP7-SAPCAL-GCE | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 10 | ? ≤ v < 2.0.6-5.el10_2.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 10 | ? ≤ v < 2.0.6-5.el10_2.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 8 | ? ≤ v < 2.0.3-2.el8_10.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 8 | ? ≤ v < 2.0.3-2.el8_10.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 9 | ? ≤ v < 2.0.3-12.el9_8.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Liberty Linux 9 | ? ≤ v < 2.0.3-12.el9_8.3 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Desktop 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Desktop 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Module for Basesystem 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Module for Basesystem 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 12 SP5-LTSS | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP4-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP4-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP5-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP5-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP6-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP6-LTSS | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | ? ≤ v < 2.0.3-3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP4 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP4 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP5 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP5 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP6 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP6 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP Applications 15 SP7 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP applications 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Linux Enterprise Server for SAP applications 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Proxy LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Proxy LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Retail Branch Server LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Retail Branch Server LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Server LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | SUSE Manager Server LTS 4.3 | ? ≤ v < 2.0.3-150000.3.6.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Leap 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Leap 16.0 | ? ≤ v < 2.0.7-160000.5.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Tumbleweed | ? ≤ v < 2.0.7-3.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Tumbleweed | ? ≤ v < 2.0.7-3.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Tumbleweed | ? ≤ v < 2.0.7-3.1 | CVEProject cvelistV5 (CNA) |
| SUSE | openSUSE Tumbleweed | ? ≤ v < 2.0.7-3.1 | CVEProject cvelistV5 (CNA) |
| libXfont | libXfont | ? ≤ v ≤ 2.0.8 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۶/۱۹
- آخرین بهروزرسانی
- ۱۴۰۵/۰۶/۱۹
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- suse
پیشبینی بهرهبرداری (EPSS)
۰٫۲۶٪
احتمال بهرهبرداری در ۳۰ روز
۱۸٫۱٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-122Heap-based Buffer Overflow