Every CVE Search/ Get API key

CVE-2013-6462

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org...

9.3 HighFix available

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Exploit likelihood

10.3%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
CVE-2013-6462
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
CVE-2013-6462
Updated
2026-11-02
EUVDEUVD-2013-6266 No score

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
EUVD-2013-6266
Updated
2026-11-03
GitHub AdvisoriesGHSA-7vj8-7ww8-h9v6 No score

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org...

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
GHSA-7vj8-7ww8-h9v6
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
CVE-2013-6462
Updated
2026-11-02
OSVDEBIAN-CVE-2013-6462 No score

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Record
DEBIAN-CVE-2013-6462
Updated
2026-11-02
OSVMGASA-2014-0020 No score

Updated libxfont packages fix security vulnerability

Updated libxfont packages fix security vulnerability:

It was discovered that a buffer overflow in the processing of Glyph Bitmap Distribution fonts (BDF) could result in the execution of arbitrary code (CVE-2013-6462).

Record
MGASA-2014-0020
Updated
2026-11-02
OSVopenSUSE-SU-2024:10299-1 No score

libXfont-devel-1.5.2-1.1 on GA media

These are all security issues fixed in the libXfont-devel-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10299-1
Updated
2026-11-02
OSVSUSE-SU-2015:0674-1 No score

Security update for xorg-x11-libs

xorg-x11-libs was patched to fix the following security issues:

* Integer overflow of allocations in font metadata file parsing.
  (CVE-2014-0209)
* libxfont not validating length fields when parsing xfs protocol
  replies. (CVE-2014-0210)
* Integer overflows causing miscalculating memory needs for xfs
  replies. (CVE-2014-0211)

Further information is available at http://lists.x.org/archives/xorg-announce/2014-May/002431.html http://lists.x.org/archives/xorg-announce/2014-May/002431.html .

Security Issues references:

* CVE-2014-0209
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0209>
* CVE-2014-0210
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0210>
* CVE-2014-0211
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0211>
Record
SUSE-SU-2015:0674-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxfont
Debian:12
 before 1:1.4.7-1
1:1.4.7-1
libxfont
Debian:13
 before 1:1.4.7-1
1:1.4.7-1
libxfont
Debian:14
 before 1:1.4.7-1
1:1.4.7-1
libxfont
Debian:6.0
 before 1:1.4.1-4, plus listed versions
1:1.4.1-21:1.4.1-3
1:1.4.1-4
libxfont
Debian:7
 before 1:1.4.5-3, plus listed versions
1:1.4.5-2
1:1.4.5-3
libxfont
Mageia:3
 before 1.4.5-3.1.mga3
1.4.5-3.1.mga3
libXfont
Red Hat:enterprise_linux:5::client
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
Show 16 moreShow less
Affected packages
PackageAffectedFixed
libXfont-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont-devel
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.5.el5_10
0:1.2.2-1.0.5.el5_10
libXfont
Red Hat:enterprise_linux:6::client
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-devel
Red Hat:enterprise_linux:6::client
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont
Red Hat:enterprise_linux:6::server
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-devel
Red Hat:enterprise_linux:6::server
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5
libXfont-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.5-3.el6_5
0:1.4.5-3.el6_5

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-6462 is a high vulnerability (CVSS 9.3) in X Libxfont, published January 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.3%, the 95th percentile. Fixed in libxfont 1:1.4.7-1.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open