CVE-2017-16611

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs…

published December 1, 2017

CVSS
—
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00420 · 34.9th percentile
Published
2017-12-01T17:00Z
EPSS history
Timeline
  • 01 DEC 17:00Z
    In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs…
    cvelistv5