The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47103 advisory.

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0818 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-56001:
    A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size     could be used by attackers able to access the X Server to execute code within the X server cont

    CVE-2026-56002:
    A heap bufferflow in pcfReadFont() due to missing glyph bounds checkingin libXfont2 before 2.0.8     allows attackers authenticated as X client to execute code within the X server.

    CVE-2026-56003:
    A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in     libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using     authenticated X clients to execute code within the X server.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51059 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51058 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:51066 advisory.

    X.Org X11 libXfont2 runtime library

    Security Fix(es):

    * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

    * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

    * libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in     libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using     authenticated X clients to execute code within the X server.(CVE-2026-56003)

    A heap bufferflow in pcfReadFont() due to missing glyph bounds checking  in libXfont2 before 2.0.8     allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)

    A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size     could be used by attackers able to access the X Server to execute code within the X server     cont(CVE-2026-56001)

Tenable has extracted the preceding description block directly from the EulerOS libXfont2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141787 advisory.

    A heap bufferflow in pcfReadFont() due to missing glyph bounds checkingin libXfont2 before 2.0.8     allows attackers authenticated as X client to execute code within the X server.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
330623	RockyLinux 8 : libXfont2 (RLSA-2026:47103)	Nessus	Rocky Linux Local Security Checks	2026/7/29	2026/7/29	high
333140	TencentOS Server 3: libXfont2 (TSSA-2026:0818)	Nessus	Tencent Local Security Checks	2026/8/6	2026/8/6	high
333168	RHEL 9 : libXfont2 (RHSA-2026:51059)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
333173	RHEL 9 : libXfont2 (RHSA-2026:51058)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
333174	RHEL 8 : libXfont2 (RHSA-2026:51066)	Nessus	Red Hat Local Security Checks	2026/8/6	2026/8/6	high
347229	EulerOS 2.0 SP10 : libXfont2 (EulerOS-SA-2026-3746)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
369067	Unity Linux 20.1070a Security Update: libXfont2 (UTSA-2026-141787)	Nessus	Unity Linux Local Security Checks	2026/10/21	2026/10/21	high

検出

プラグインの検索

high

high

high

high

high

high

high