Test ID:	1.3.6.1.4.1.25623.1.0.120003
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2014-282)
Summary:	The remote host is missing an update for the 'libXfont' package(s) announced via the ALAS-2014-282 advisory.
Description:	Summary: The remote host is missing an update for the 'libXfont' package(s) announced via the ALAS-2014-282 advisory. Vulnerability Insight: A stack-based buffer overflow flaw was found in the way the libXfont library parsed Glyph Bitmap Distribution Format (BDF) fonts. A malicious, local user could exploit this issue to potentially execute arbitrary code with the privileges of the X.Org server. (CVE-2013-6462) Affected Software/OS: 'libXfont' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6462 BugTraq ID: 64694 http://www.securityfocus.com/bid/64694 Debian Security Information: DSA-2838 (Google Search) http://www.debian.org/security/2014/dsa-2838 http://seclists.org/oss-sec/2014/q1/33 http://lists.x.org/archives/xorg-announce/2014-January/002389.html http://osvdb.org/101842 RedHat Security Advisories: RHSA-2014:0018 http://rhn.redhat.com/errata/RHSA-2014-0018.html http://secunia.com/advisories/56240 http://secunia.com/advisories/56336 http://secunia.com/advisories/56357 http://secunia.com/advisories/56371 SuSE Security Announcement: openSUSE-SU-2014:0073 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html SuSE Security Announcement: openSUSE-SU-2014:0075 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html http://www.ubuntu.com/usn/USN-2078-1 XForce ISS Database: libxfont-cve20136462-bo(90123) https://exchange.xforce.ibmcloud.com/vulnerabilities/90123
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.