The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Aug 30, 2017 | Jun 15, 2013 |
| Debian | — | Upgrade libx11 | Jul 30, 2024 | Jun 15, 2013 |
| Freebsd | — | Upgrade xf86-video-openchromeUpgrade libXvMCUpgrade libXrenderUpgrade libXcursorUpgrade libXpUpgrade libXextUpgrade libXtUpgrade libXtstUpgrade libXxf86vmUpgrade libFSUpgrade libxcbUpgrade libXfixesUpgrade libXvUpgrade libXiUpgrade libXrandrUpgrade libX11Upgrade libXineramaUpgrade libXresUpgrade libdmxUpgrade libXxf86dgaUpgrade libGL | Dec 10, 2025 | Jun 4, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jun 15, 2013 |
| Oracle Solaris | — | Upgrade x11/library/libxcb to version 1.8.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxext to version 1.3.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxxf86vm to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxtst to version 1.2.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/mesa to version 7.11.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxinerama to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxfixes to version 5.0-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrender to version 0.9.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxvmc to version 1.0.7-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxp to version 1.0.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrandr to version 1.3.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxi to version 1.6.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/toolkit/libxt to version 1.1.3-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libdmx to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libx11 to version 1.5.0-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxv to version 1.0.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libfs to version 1.0.4-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcursor to version 1.1.13-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxres to version 1.0.6-0.175.1.8.0.3.1332 on Solaris 11.1 | May 29, 2017 | Jun 15, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 23, 2013 |
| Suse | — | Upgrade libx11-xcb1Upgrade xorg-x11-fonts-syriacUpgrade libx11-6-32bitUpgrade libx11-dataUpgrade xorg-x11-libX11-develUpgrade xorg-x11-server-glxUpgrade libx11-devel-32bitUpgrade libx11-xcb1-32bitUpgrade libx11-6Upgrade xorg-x11-XvfbUpgrade xorg-x11Upgrade xorg-x11-docUpgrade xorg-x11-fonts-cyrillicUpgrade xorg-x11-libX11-devel-32bitUpgrade sle-sdk-releaseUpgrade libX11Upgrade xorg-x11-manUpgrade libx11-develUpgrade xorg-x11-libs-64bitUpgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-fonts-scalableUpgrade xorg-x11-devel-64bitUpgrade xorg-x11-libsUpgrade xorg-x11-develUpgrade xorg-x11-libx11-32bitUpgrade xorg-x11-libs-x86Upgrade xorg-x11-fonts-100dpiUpgrade xorg-x11-XnestUpgrade xorg-x11-libx11Upgrade xorg-x11-libX11-x86Upgrade xorg-x11-libs-32bitUpgrade xorg-x11-fonts-75dpiUpgrade xorg-x11-devel-32bitUpgrade xorg-x11-sdk | Dec 12, 2013 | Jun 15, 2013 |
| Ubuntu | — | Upgrade libx11-6 | Nov 8, 2024 | Jun 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub