X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxt. | Aug 30, 2017 | Jun 15, 2013 |
| Debian | — | Upgrade libxt | Jul 30, 2024 | Jun 15, 2013 |
| Freebsd | — | Upgrade libXineramaUpgrade xf86-video-openchromeUpgrade libXfixesUpgrade libFSUpgrade libXrenderUpgrade libXtUpgrade libXcursorUpgrade libXiUpgrade libXvUpgrade libGLUpgrade libXpUpgrade libXxf86vmUpgrade libdmxUpgrade libXvMCUpgrade libxcbUpgrade libXtstUpgrade libXxf86dgaUpgrade libXextUpgrade libX11Upgrade libXrandrUpgrade libXres | Dec 10, 2025 | Jun 4, 2013 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Oct 30, 2017 | Jun 15, 2013 |
| Oracle Solaris | — | Upgrade x11/library/libxfixes to version 5.0-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxres to version 1.0.6-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxtst to version 1.2.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxv to version 1.0.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxrandr to version 1.3.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxxf86vm to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxcursor to version 1.1.13-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxvmc to version 1.0.7-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxrender to version 0.9.7-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxp to version 1.0.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libfs to version 1.0.4-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libdmx to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/mesa to version 7.11.2-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libx11 to version 1.5.0-0.175.1.8.0.4.1336 on Solaris 11.1Upgrade x11/library/libxcb to version 1.8.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxext to version 1.3.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/toolkit/libxt to version 1.1.3-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxi to version 1.6.1-0.175.1.8.0.3.1332 on Solaris 11.1Upgrade x11/library/libxinerama to version 1.1.2-0.175.1.8.0.3.1332 on Solaris 11.1 | May 29, 2017 | Jun 15, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 23, 2013 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade xorg-x11-fonts-cyrillicUpgrade xorg-x11-fonts-75dpiUpgrade xorg-x11Upgrade xorg-x11-libXt-develUpgrade libXt6Upgrade xorg-x11-libs-32bitUpgrade xorg-x11-server-glxUpgrade sle-sdk-releaseUpgrade xorg-x11-libs-x86Upgrade xorg-x11-XvfbUpgrade xorg-x11-manUpgrade libXt-develUpgrade libXt6-32bitUpgrade libXtUpgrade xorg-x11-develUpgrade xorg-x11-libs-64bitUpgrade xorg-x11-libXt-32bitUpgrade xorg-x11-libXt-devel-32bitUpgrade xorg-x11-libXt-x86Upgrade xorg-x11-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-devel-32bitUpgrade xorg-x11-fonts-syriacUpgrade xorg-x11-fonts-scalableUpgrade xorg-x11-devel-64bitUpgrade xorg-x11-XnestUpgrade libXt-devel-32bitUpgrade xorg-x11-libsUpgrade xorg-x11-libXtUpgrade xorg-x11-fonts-100dpiUpgrade xorg-x11-doc | Dec 12, 2013 | Jun 15, 2013 |
| Ubuntu | — | Upgrade libxt6 | Nov 8, 2024 | Jun 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub