Към съдържанието
Търсене

CVE-2026-44950: SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8

9.5

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, само при определена конфигурация или състояние на системата, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation. A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.

Засегнати продукти

  • SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8: ? преди 2.0.3-150000.3.6.1
  • SUSE Container suse/kiosk/xorg:21.1-83.7: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Azure-3P: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-BYOS: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-BYOS-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-BYOS-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-BYOS-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-BYOS: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-BYOS-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-BYOS-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-BYOS-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAP-Hardened-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAPCAL: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAPCAL-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAPCAL-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP6-SAPCAL-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Azure-3P: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-BYOS-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-BYOS-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-BYOS-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-GCE-3P: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Hardened-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Hardened-BYOS-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Hardened-BYOS-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Hardened-BYOS-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAP-Hardened-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAPCAL-Azure: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAPCAL-EC2: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES15-SP7-SAPCAL-GCE: ? преди 2.0.3-150000.3.6.1
  • SUSE Image SLES-SAP-Azure: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-Azure-3P: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-BYOS-Azure: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-BYOS-EC2: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-BYOS-GCE: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-GCE: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAP-GCE-3P: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES-SAPCAL-GCE: ? преди 2.0.7-160000.5.1
  • SUSE Image SLES12-SP5-Azure-SAP-BYOS: ? преди 2.0.3-3.6.1
  • SUSE Image SLES12-SP5-Azure-SAP-On-Demand: ? преди 2.0.3-3.6.1
  • SUSE Image SLES12-SP5-EC2-SAP-BYOS: ? преди 2.0.3-3.6.1
  • SUSE Image SLES12-SP5-EC2-SAP-On-Demand: ? преди 2.0.3-3.6.1
  • SUSE Image SLES12-SP5-GCE-SAP-BYOS: ? преди 2.0.3-3.6.1
  • SUSE Image SLES12-SP5-GCE-SAP-On-Demand: ? преди 2.0.3-3.6.1
  • SUSE SUSE Liberty Linux 10: ? преди 2.0.6-5.el10_2.3
  • SUSE SUSE Liberty Linux 10: ? преди 2.0.6-5.el10_2.3
  • SUSE SUSE Liberty Linux 8: ? преди 2.0.3-2.el8_10.3
  • SUSE SUSE Liberty Linux 8: ? преди 2.0.3-2.el8_10.3
  • SUSE SUSE Liberty Linux 9: ? преди 2.0.3-12.el9_8.3
  • SUSE SUSE Liberty Linux 9: ? преди 2.0.3-12.el9_8.3
  • SUSE SUSE Linux Enterprise Desktop 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Desktop 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 12 SP5-LTSS: ? преди 2.0.3-3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP4-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP4-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP5-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP5-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP6-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 15 SP6-LTSS: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server 16.0: ? преди 2.0.7-160000.5.1
  • SUSE SUSE Linux Enterprise Server 16.0: ? преди 2.0.7-160000.5.1
  • SUSE SUSE Linux Enterprise Server for SAP applications 16.0: ? преди 2.0.7-160000.5.1
  • SUSE SUSE Linux Enterprise Server for SAP applications 16.0: ? преди 2.0.7-160000.5.1
  • SUSE SUSE Linux Enterprise Server LTSS Extended Security 12 SP5: ? преди 2.0.3-3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Proxy LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Proxy LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Retail Branch Server LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Retail Branch Server LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Server LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE SUSE Manager Server LTS 4.3: ? преди 2.0.3-150000.3.6.1
  • SUSE openSUSE Leap 16.0: ? преди 2.0.7-160000.5.1
  • SUSE openSUSE Leap 16.0: ? преди 2.0.7-160000.5.1
  • SUSE openSUSE Tumbleweed: ? преди 2.0.7-3.1
  • SUSE openSUSE Tumbleweed: ? преди 2.0.7-3.1
  • SUSE openSUSE Tumbleweed: ? преди 2.0.7-3.1
  • SUSE openSUSE Tumbleweed: ? преди 2.0.7-3.1
  • libXfont libXfont: ? до 2.0.8

Вид слабост

История

  • 10 септември 2026 Публикувано

Други уязвимости в SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8

Първоизточници

CVE-2026-44950: SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 | freedomonline.bg