Known vulnerabilities in libxfont (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libxfont (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libxfont_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
1:1.4.7-1ubuntu0.4+esm2
1:1.5.1-1ubuntu0.16.04.4+esm2
1:2.0.3-1ubuntu0.1~esm2
1:2.0.3-1ubuntu0.20.04.1~esm2
1:2.0.5-1ubuntu0.2
1:2.0.6-1+deb13u1build0.24.04.2
1:2.0.6-2ubuntu0.2
1:2.0.6-1build1
1:2.0.6-1
1:2.0.5-1build1
1:2.0.5-1
1:2.0.4-1build3
1:2.0.4-1build2
1:2.0.4-1build1
1:2.0.3-2
1:2.0.4-1
1:2.0.1-4ubuntu1
1:2.0.1-3ubuntu1
1:2.0.1-3ubuntu1.1
1:2.0.1-3ubuntu0.2
1:2.0.1-3ubuntu0.1
1:1.5.1-1ubuntu0.16.04.4
1:1.5.1-1ubuntu0.16.04.3
1:1.5.1-1ubuntu0.16.04.2
1:1.4.7-1ubuntu0.4
1:1.4.7-1ubuntu0.3
2.0.3
2.0.3-1
1.5.1
1.5.1-1ubuntu0.16.04.4
1.5.1-1
1.4.7
1.4.7-1ubuntu0.4
1.4.7-1
1.4.4
1.4.4-1ubuntu0.3
1.4.4-1
1:2.0.1-4
1:2.0.3-1
1:0.99.0+cvs.20050909-1
1:2.0.1-3
1:2.0.1-1
1:2.0.1-2
1:1.5.2-1
1:1.5.1-1ubuntu0.16.04.1
1:1.5.1-1
1:1.4.99.901-1ubuntu1
1:1.4.7-2
1:1.4.99.901-1
1:1.4.99.901-1ubuntu0.1
1:1.4.5-1
1:1.4.5-2
1:1.4.6-1
1:1.4.7-1
1:1.4.7-1ubuntu0.1
1:1.4.7-1ubuntu0.2
1:1.4.1-2
1:1.4.2-1
1:1.4.3-1
1:1.4.3-2
1:1.4.4-1
1:1.4.4-1ubuntu0.1
1:1.4.4-1ubuntu0.2
1:1.4.4-1ubuntu0.3
1:0.99.0-1
1:1.0.0-1
1:1.0.0-2
1:1.0.0-3
1:1.0.0-4
1:1.1.0-1
1:1.2.0-1
1:1.2.0-2
1:1.2.2-1
1:1.2.2-2
1:1.2.7-1
1:1.2.8-1
1:1.2.9-1
1:1.3.1-1
1:1.3.1-2
1:1.3.2-1
1:1.3.3-1
1:1.3.4-1
1:1.3.4-2
1:1.4.0-1
1:1.4.0-2
1:1.4.0-3
1:1.4.1-1
1:1.4.1-1ubuntu0.1
1:1.4.1-1ubuntu0.2
1:1.4.1-1ubuntu0.3
1:1.4.1-1ubuntu0.4
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138461 - Heap-based Buffer Overflow CVE-2026-56003 |
CWE-122 | Low | 1:1.4.7-1ubuntu0.4+esm2, 1:1.5.1-1ubuntu0.16.04.4+esm2, 1:2.0.3-1ubuntu0.1~esm2, 1:2.0.3-1ubuntu0.20.04.1~esm2, 1:2.0.5-1ubuntu0.2, 1:2.0.6-1+deb13u1build0.24.04.2, 1:2.0.6-2ubuntu0.2 | 20.07.2026 |
SB2026072049 SB2026072059 SB2026072060 and 14 more |
||
| #VU138436 - Heap-based Buffer Overflow CVE-2026-56002 |
CWE-122 | Low | 1:1.4.7-1ubuntu0.4+esm2, 1:1.5.1-1ubuntu0.16.04.4+esm2, 1:2.0.3-1ubuntu0.1~esm2, 1:2.0.3-1ubuntu0.20.04.1~esm2, 1:2.0.5-1ubuntu0.2, 1:2.0.6-1+deb13u1build0.24.04.2, 1:2.0.6-2ubuntu0.2 | 20.07.2026 |
SB2026072049 SB2026072059 SB2026072060 and 15 more |
||
| #VU138427 - Integer overflow CVE-2026-56001 |
CWE-190 | Low | 1:1.4.7-1ubuntu0.4+esm2, 1:1.5.1-1ubuntu0.16.04.4+esm2, 1:2.0.3-1ubuntu0.1~esm2, 1:2.0.3-1ubuntu0.20.04.1~esm2, 1:2.0.5-1ubuntu0.2, 1:2.0.6-1+deb13u1build0.24.04.2, 1:2.0.6-2ubuntu0.2 | 20.07.2026 |
SB2026072028 SB2026072049 SB2026072059 and 15 more |
||
| #VU9524 - Permissions, Privileges, and Access Controls CVE-2017-16611 |
CWE-264 | Low | 1:1.4.7-1ubuntu0.4+esm2, 1:1.5.1-1ubuntu0.16.04.4+esm2, 1:2.0.3-1ubuntu0.1~esm2, 1:2.0.3-1ubuntu0.20.04.1~esm2, 1:2.0.5-1ubuntu0.2, 1:2.0.6-1+deb13u1build0.24.04.2, 1:2.0.6-2ubuntu0.2 | 04.12.2017 |
SB2017112915 SB2017112916 SB2017112813 and 8 more |