The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxv | Sep 20, 2017 | Dec 13, 2016 |
| Debian | — | Upgrade libxv | Mar 31, 2017 | Oct 19, 2016 |
| Freebsd | — | Upgrade libXrenderUpgrade libXiUpgrade libXvMCUpgrade libXfixesUpgrade libX11Upgrade libXvUpgrade libXrandrUpgrade libXtst | Nov 14, 2016 | Oct 7, 2016 |
| Gentoo Linux | — | Upgrade x11-libs/libXi.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libXrender.Upgrade x11-libs/libXv.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libICE.Upgrade x11-libs/libXfixes. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrender to version 0.9.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrandr to version 1.4.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxfixes to version 5.0.1-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxv to version 1.0.10-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxtst to version 1.2.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxvmc to version 1.0.8-0.175.3.15.0.3.1517 on Solaris 11.3 | May 29, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade libXv-develUpgrade libwacom-dataUpgrade libxkbfileUpgrade libXvMCUpgrade libXvUpgrade mesa-filesystemUpgrade vulkan-filesystemUpgrade libXrandrUpgrade mesa-libEGL-develUpgrade mesa-libglapiUpgrade libxkbcommonUpgrade libepoxyUpgrade libevdevUpgrade mesa-private-llvmUpgrade mesa-libGLUpgrade libxcb-develUpgrade mesa-dri-driversUpgrade libXaw-develUpgrade libXt-develUpgrade libdrm-develUpgrade xcb-protoUpgrade libxcbUpgrade libxcb-docUpgrade mesa-libxatrackerUpgrade libXpm-develUpgrade vulkanUpgrade libvdpau-develUpgrade libXcursor-develUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade libwacomUpgrade libXfont2-develUpgrade libevdev-utilsUpgrade libXrandr-develUpgrade mesa-libGLESUpgrade libX11Upgrade drm-utilsUpgrade mesaUpgrade mesa-libxatracker-develUpgrade libxkbfile-develUpgrade mesa-libOSMesaUpgrade libvdpau-docsUpgrade libXfont2Upgrade xkeyboard-configUpgrade libX11-develUpgrade libinput-develUpgrade libxkbcommon-develUpgrade libICEUpgrade libfontenc-develUpgrade libXxf86vmUpgrade libXfixes-develUpgrade libXfixesUpgrade mesa-libgbmUpgrade vulkan-develUpgrade libXdmcpUpgrade libXdmcp-develUpgrade libICE-develUpgrade libfontencUpgrade libXrenderUpgrade libXawUpgrade libXtst-develUpgrade libXtUpgrade libXiUpgrade xkeyboard-config-develUpgrade libxkbcommon-x11-develUpgrade mesa-libOSMesa-develUpgrade libxkbcommon-x11Upgrade libXi-develUpgrade libXcursorUpgrade libXxf86vm-develUpgrade libXtstUpgrade libvdpauUpgrade mesa-libGL-develUpgrade libinputUpgrade mesa-libEGLUpgrade mesa-private-llvm-develUpgrade libepoxy-develUpgrade libXrender-develUpgrade mesa-libGLES-develUpgrade libXvMC-develUpgrade libXfont-develUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade libXpmUpgrade libwacom-develUpgrade libevdev-develUpgrade libXfontUpgrade xorg-x11-proto-devel | Aug 8, 2017 | Dec 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2016 |
| Suse | — | Upgrade libXi-develUpgrade libXtst6Upgrade libx11-6Upgrade libx11-6-32bitUpgrade libXfixes3Upgrade xorg-x11-libXvUpgrade libXtst6-32bitUpgrade libXrender1-32bitUpgrade libx11-xcb1Upgrade libXrender1Upgrade libXrandr-develUpgrade libXvMC-develUpgrade libXi6Upgrade libXrandr2Upgrade libXv-develUpgrade libXtst-develUpgrade libx11-develUpgrade xorg-x11-libXv-x86Upgrade libXrandr2-32bitUpgrade libXv1Upgrade libXfixes3-32bitUpgrade libx11-xcb1-32bitUpgrade libXrender-develUpgrade libx11-dataUpgrade xorg-x11-libXv-32bitUpgrade xorg-x11-libXv-devel-32bitUpgrade libXfixes-develUpgrade libXv1-32bitUpgrade libXi6-32bitUpgrade libXvMC1Upgrade xorg-x11-libXv-devel | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade libxv1 (Ubuntu Pro) | May 27, 2022 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub