An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-openglUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-develUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libglvnd-glxUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade xorg-x11-driversUpgrade libglvndUpgrade libinput-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade libx11 | Aug 22, 2024 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libX11Upgrade libX11-debuginfoUpgrade libX11-develUpgrade libX11-common | Jun 24, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11Upgrade libdrmUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade libglvnd-core-develUpgrade libwacomUpgrade libwacom-dataUpgrade mesa-vulkan-driversUpgrade libinput-utilsUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvnd-glxUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-develUpgrade libdrm-debuginfoUpgrade libdrm-develUpgrade libinput-debugsourceUpgrade libglvnd-openglUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libGLUpgrade libX11-xcbUpgrade libinput-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libX11-develUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-commonUpgrade mesa-libxatracker-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libwacom-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libxatrackerUpgrade libwacom-debugsourceUpgrade mesa-libGL-develUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libgbmUpgrade mesa-debugsourceUpgrade libX11-debugsourceUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade mesa-filesystemUpgrade libinputUpgrade libglvnd-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Jun 1, 2021 | Aug 5, 2020 |
| Debian | — | Upgrade libx11 | Aug 5, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade libX11 | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Aug 28, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 3, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Oct 13, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade libX11-commonUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libX11-develUpgrade libinput-utilsUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade mesa-libglapiUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XnestUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade egl-waylandUpgrade libglvnd-core-develUpgrade libX11-xcbUpgrade libglvndUpgrade libinput-develUpgrade mesa-dri-driversUpgrade libinputUpgrade mesa-vulkan-driversUpgrade mesa-libxatrackerUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade libwacomUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libwacom-develUpgrade mesa-filesystemUpgrade xorg-x11-driversUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade libdrmUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade mesa-libOSMesaUpgrade libglvnd-openglUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL | May 26, 2021 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade libinput-develUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade mesa-debugsourceUpgrade mesa-libEGLUpgrade libinput-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-libGLUpgrade libinput-utils-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade mesa-libEGL-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libxatrackerUpgrade libX11-xcbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-dri-driversUpgrade egl-wayland-debuginfoUpgrade libX11-debuginfoUpgrade libglvndUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-glxUpgrade mesa-libgbmUpgrade libglvnd-eglUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glesUpgrade libinput-test-debuginfoUpgrade egl-waylandUpgrade libdrmUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-openglUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libX11-commonUpgrade libdrm-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-vdpau-driversUpgrade libglvnd-debugsourceUpgrade libX11-develUpgrade libglvnd-opengl-debuginfoNo solution existsUpgrade libinput-debuginfoUpgrade xorg-x11-driversUpgrade libX11Upgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacomUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libwacom-develUpgrade mesa-libGL-debuginfoUpgrade libinputUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debugsource | May 21, 2021 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-libglapiUpgrade libdrm-develUpgrade mesa-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libinput-debugsourceUpgrade libX11Upgrade libX11-debugsourceUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libGLUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libEGLUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-XorgUpgrade libdrm-debugsourceUpgrade libX11-xcbUpgrade mesa-libEGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XnestUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libdrm-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-openglUpgrade mesa-dri-driversUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade libinputUpgrade libdrmUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade mesa-vulkan-develUpgrade egl-waylandUpgrade libwacomUpgrade libinput-develUpgrade libX11-develUpgrade libglvnd-eglUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-debugsourceUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade libX11-xcb-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libgbm-develUpgrade libwacom-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libgbmUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade libxcb-render0Upgrade libxcb-record0-32bitUpgrade libxcb-shape0-32bitUpgrade libxcb-damage0-32bitUpgrade libx11-dataUpgrade libxcb-xtest0-32bitUpgrade libx11-6Upgrade libxcb-xinput0-32bitUpgrade libxcb-xinerama0-32bitUpgrade libxcb-dri3-0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-screensaver0-32bitUpgrade libxcb-dpms0-32bitUpgrade libxcb-composite0Upgrade libx11-xcb1Upgrade libx11-6-32bitUpgrade libxcb1Upgrade libxcb1-32bitUpgrade libxcb-record0Upgrade libxcb-xv0Upgrade libxcb-devel-32bitUpgrade libxcb-xv0-32bitUpgrade libxcb-xfixes0-32bitUpgrade libx11-devel-32bitUpgrade libxcb-randr0-32bitUpgrade libxcb-dpms0Upgrade libxcb-present0-32bitUpgrade libxcb-xinerama0Upgrade libxcb-devel-docUpgrade libxcb-sync1Upgrade libxcb-xevie0Upgrade libxcb-shape0Upgrade libxcb-xfixes0Upgrade libxcb-sync1-32bitUpgrade libxcb-xinput0Upgrade xorg-x11-libx11Upgrade libxcb-present0Upgrade libxcb-dri2-0Upgrade libxcb-dri3-0-32bitUpgrade libxcb-xtest0Upgrade libxcb-xkb1-32bitUpgrade libx11-xcb1-32bitUpgrade libxcb-render0-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-res0-32bitUpgrade libxcb-damage0Upgrade libxcb-develUpgrade libxcb-composite0-32bitUpgrade libxcb-xf86dri0Upgrade libx11-develUpgrade libxcb-xprint0Upgrade libxcb-glx0-32bitUpgrade libxcb-randr0Upgrade libxcb-xvmc0-32bitUpgrade libxcb-glx0Upgrade libxcb-shm0Upgrade libxcb-screensaver0Upgrade libxcb-xvmc0Upgrade libxcb-xkb1Upgrade libxcb-shm0-32bitUpgrade libxcb-res0Upgrade libxcb-xf86dri0-32bit | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-6 (Ubuntu Pro) | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub