The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51061 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51060 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8     allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)

    A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in     libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using     authenticated X clients to execute code within the X server.(CVE-2026-56003)

    A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size     could be used by attackers able to access the X Server to execute code within the X server     cont(CVE-2026-56001)

Tenable has extracted the preceding description block directly from the EulerOS libXfont2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4678 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4678-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     July 12, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libxfont     Version        : 1:2.0.4-1+deb11u1 1:2.0.6-1+deb12u1     CVE ID         : CVE-2026-56001 CVE-2026-56002 CVE-2026-56003

    A series of heap overflows in bitmap/PCF parser code could be used by     authenticated attackers to execute code in the X server context.

    CVE-2026-56001

        A heap buffer overflow in BitmapScaleBitmaps in due to an overflowing         32-bit size.

    CVE-2026-56002

        A heap bufferflow in pcfReadFont() due to missing glyph bounds         checking.

    CVE-2026-56003

        A heap buffer overflow due to missing size checking in the property         buffer when parsing PCF files in ComputeScaledProperties().

    For Debian 11 bullseye, these problems have been fixed in version     1:2.0.4-1+deb11u1.

    For Debian 12 bookworm, these problems have been fixed in version     1:2.0.6-1+deb12u1.

    We recommend that you upgrade your libxfont packages.

    For the detailed security status of libxfont please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libxfont

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21284-1 advisory.

    This update for libXfont2 fixes the following issues

    - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018).
    - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019).
    - CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow (bsc#1269020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6388 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6388-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 15, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libxfont     CVE ID         : CVE-2026-56001 CVE-2026-56002 CVE-2026-56003     Debian Bug     : 1141702

    Several vulnerabilities were discovered in libXfont, the X11 font     rasterisation library, which may result in arbitrary code execution in     the X server context for authenticated X clients.

    For the stable distribution (trixie), these problems have been fixed in     version 1:2.0.6-1+deb13u1.

    We recommend that you upgrade your libxfont packages.

    For the detailed security status of libxfont please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/libxfont

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47079 advisory.

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51063 advisory.

    [2.0.3-1.0.1]
    - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 [Orabug: 39843361]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51067 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows     attackers authenticated as X client to execute code within the X server. (CVE-2026-56002)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-18ea3f47f8 advisory.

    libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1967 advisory.

    BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47103 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47103 advisory.

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0818 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-56001:
    A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size     could be used by attackers able to access the X Server to execute code within the X server cont

    CVE-2026-56002:
    A heap bufferflow in pcfReadFont() due to missing glyph bounds checkingin libXfont2 before 2.0.8     allows attackers authenticated as X client to execute code within the X server.

    CVE-2026-56003:
    A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in     libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using     authenticated X clients to execute code within the X server.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51059 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51058 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51066 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
333120	RHEL 10 : libXfont2 (RHSA-2026:51061)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
333122	RHEL 8 : libXfont2 (RHSA-2026:51060)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
343685	EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-3347)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/8	high
326438	Debian dla-4678 : libxfont-dev - security update	Nessus	Debian Local Security Checks	2026/7/13	2026/7/13	high
326679	openSUSE 16 Security Update : libXfont2 (openSUSE-SU-2026:21284-1)	Nessus	SuSE Local Security Checks	2026/7/14	2026/7/14	high
326977	Debian dsa-6388 : libxfont-dev - security update	Nessus	Debian Local Security Checks	2026/7/15	2026/7/15	high
330687	RockyLinux 10 : libXfont2 (RLSA-2026:47079)	Nessus	Rocky Linux Local Security Checks	2026/7/29	2026/7/29	high
334986	Oracle Linux 7 : libXfont2 (ELSA-2026-51063)	Nessus	Oracle Linux Local Security Checks	2026/8/12	2026/8/12	high
333164	RHEL 8 : libXfont2 (RHSA-2026:51067)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
325692	Linux Distros Unpatched Vulnerability : CVE-2026-56002	Nessus	Misc.	2026/7/8	2026/7/30	high
326402	Fedora 43 : libXfont2 (2026-18ea3f47f8)	Nessus	Fedora Local Security Checks	2026/7/12	2026/7/12	high
328464	Amazon Linux 2023 : libXfont2, libXfont2-devel (ALAS2023-2026-1967)	Nessus	Amazon Linux Local Security Checks	2026/7/20	2026/7/20	high
330447	RHEL 8 : libXfont2 (RHSA-2026:47103)	Nessus	Red Hat Local Security Checks	2026/7/28	2026/7/28	high
330623	RockyLinux 8 : libXfont2 (RLSA-2026:47103)	Nessus	Rocky Linux Local Security Checks	2026/7/29	2026/7/29	high
333140	TencentOS Server 3: libXfont2 (TSSA-2026:0818)	Nessus	Tencent Local Security Checks	2026/8/6	2026/8/6	high
333168	RHEL 9 : libXfont2 (RHSA-2026:51059)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
333173	RHEL 9 : libXfont2 (RHSA-2026:51058)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
333174	RHEL 8 : libXfont2 (RHSA-2026:51066)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high