CVE-2017-16611

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

CVSS v3.0 5.5 MEDIUM
CVSS v2.0 4.9 MEDIUM

5.5^/10

CVSS v3.0 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1050459	Issue Tracking Tool Signature VDB Entry
http://www.ubuntu.com/usn/USN-3500-1	Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/11/28/7	Mailing List Patch Third Party Advisory
https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2	Patch Third Party Advisory
https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2	Patch Third Party Advisory
http://security.cucumberlinux.com/security/details.php?id=155	Third Party Advisory
https://security.gentoo.org/glsa/201801-10	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html	Issue Tracking Mailing List Third Party Advisory

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:debian:debian_linux:8.0:::::::*
	cpe:2.3:o:debian:debian_linux:9.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:17.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:17.10:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:x:libxfont::::::::
	cpe:2.3:a:x:libxfont::::::::

Information

Published : 2017-12-01 09:29

Updated : 2022-02-19 22:06

NVD link : CVE-2017-16611

Mitre link : CVE-2017-16611

JSON object : View

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

Advertisement

Products Affected

debian

debian_linux

canonical

ubuntu_linux

x

libxfont

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=1050459", "name": "https://bugzilla.suse.com/show_bug.cgi?id=1050459", "tags": ["Issue Tracking", "Tool Signature", "VDB Entry"], "refsource": "CONFIRM"}, {"url": "http://www.ubuntu.com/usn/USN-3500-1", "name": "USN-3500-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://www.openwall.com/lists/oss-security/2017/11/28/7", "name": "[oss-security] 20171128 CVE-2017-16611 libXfont Open files with O_NOFOLLOW", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2", "name": "[freedesktop-xorg-announce] 20171128 libXfont 1.5.4", "tags": ["Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2", "name": "[freedesktop-xorg-announce] 20171128 libXfont2 2.0.3", "tags": ["Patch", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://security.cucumberlinux.com/security/details.php?id=155", "name": "http://security.cucumberlinux.com/security/details.php?id=155", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://security.gentoo.org/glsa/201801-10", "name": "GLSA-201801-10", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00028.html", "name": "[debian-lts-announce] 20220125 [SECURITY] [DLA 2901-1] libxfont security update", "tags": ["Issue Tracking", "Mailing List", "Third Party Advisory"], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-59"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-16611", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "acInsufInfo": false, "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}}, "publishedDate": "2017-12-01T17:29Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.5.4", "versionStartIncluding": "1.0.0"}, {"cpe23Uri": "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.0.3", "versionStartIncluding": "2.0.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-02-20T06:06Z"}