The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61390 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61995 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0901 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-44950:
    A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a     malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to     properly validate the total size of the incoming data, leading to an overwrite of memory beyond the     intended buffer. If the X server runs as a privileged user, this could result in privilege escalation,     allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to     a denial of service, causing the system to crash.

    CVE-2026-59679:
    A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font     server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client     incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege     escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an     unprivileged user.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61756 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3499-1 advisory.

    - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661).
    - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55448 advisory.

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a     single buffer. Existing checks validates only that the source slice (position, length) lies within the     source bitmap buffer. It does not check whether the running destination cursor has exceeded the     allocation. A malicious font server can send overlapping source offsets -- for example 1000 glyphs each     referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing     validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap     buffer overflow with attacker-controlled content. (CVE-2026-44950)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61755 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55446 advisory.

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59312 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f471dd34a advisory.

    libXfont2 2.0.9 (CVE-2026-59679, CVE-2026-44950)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55447 advisory.

    - CVE fix for: CVE-2026-59679       Resolves: https://redhat.atlassian.net/browse/RHEL-221957

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55446 advisory.

    - CVE fix for: CVE-2026-59679       Resolves: https://redhat.atlassian.net/browse/RHEL-221956

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1637:04 advisory.

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
      * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62123 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)

    * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3500-1 advisory.

    - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661).
    - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libXfont2 installed on the remote host is prior to 2.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-218-01 advisory.

    New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the libXfont2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55447 advisory.

    * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
      * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client     (CVE-2026-44950)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
342027	RHEL 9 : libXfont2 (RHSA-2026:61390)	Nessus	Red Hat Local Security Checks	2026/8/31	2026/9/11	critical
342147	RHEL 8 : libXfont2 (RHSA-2026:61995)	Nessus	Red Hat Local Security Checks	2026/9/1	2026/9/11	critical
341109	TencentOS Server 3: libXfont2 (TSSA-2026:0901)	Nessus	Tencent Local Security Checks	2026/8/27	2026/9/16	critical
342034	RHEL 8 : libXfont2 (RHSA-2026:61756)	Nessus	Red Hat Local Security Checks	2026/8/31	2026/9/11	critical
333023	SUSE SLES12 Security Update : libXfont2 (SUSE-SU-2026:3499-1)	Nessus	SuSE Local Security Checks	2026/8/6	2026/9/11	critical
335972	RockyLinux 10 : libXfont2 (RLSA-2026:55448)	Nessus	Rocky Linux Local Security Checks	2026/8/17	2026/9/11	critical
332114	Linux Distros Unpatched Vulnerability : CVE-2026-44950	Nessus	Misc.	2026/8/5	2026/9/14	critical
341727	RHEL 8 : libXfont2 (RHSA-2026:61755)	Nessus	Red Hat Local Security Checks	2026/8/31	2026/9/16	critical
335978	RockyLinux 8 : libXfont2 (RLSA-2026:55446)	Nessus	Rocky Linux Local Security Checks	2026/8/17	2026/9/11	critical
339454	RHEL 9 : libXfont2 (RHSA-2026:59312)	Nessus	Red Hat Local Security Checks	2026/8/25	2026/9/11	critical
333259	Fedora 43 : libXfont2 (2026-4f471dd34a)	Nessus	Fedora Local Security Checks	2026/8/7	2026/9/11	critical
336004	Oracle Linux 9 : libXfont2 (ELSA-2026-55447)	Nessus	Oracle Linux Local Security Checks	2026/8/17	2026/9/11	critical
338018	Oracle Linux 8 : libXfont2 (ELSA-2026-55446)	Nessus	Oracle Linux Local Security Checks	2026/8/19	2026/9/11	critical
339110	MiracleLinux 9 : libXfont2-2.0.3-12.el9_8.3 (AXSA:2026-1637:04)	Nessus	Miracle Linux Local Security Checks	2026/8/24	2026/9/11	critical
342235	RHEL 10 : libXfont2 (RHSA-2026:62123)	Nessus	Red Hat Local Security Checks	2026/9/1	2026/9/11	critical
333041	SUSE SLED15 / SLES15 Security Update : libXfont2 (SUSE-SU-2026:3500-1)	Nessus	SuSE Local Security Checks	2026/8/6	2026/9/11	critical
333266	Slackware Linux 15.0 / current libXfont2 Multiple Vulnerabilities (SSA:2026-218-01)	Nessus	Slackware Local Security Checks	2026/8/7	2026/9/11	critical
337661	AlmaLinux 9 : libXfont2 (ALSA-2026:55447)	Nessus	Alma Linux Local Security Checks	2026/8/18	2026/9/11	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical