An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade libX11-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade libX11-common | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade gdm-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade libX11-commonUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade gdm-develUpgrade libxkbcommon-x11Upgrade mesa-libGLw-debuginfoUpgrade libX11-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-drv-ati-debuginfoUpgrade mesa-libGLwUpgrade gdmUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XdmxUpgrade libxkbcommonUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-wacomUpgrade libX11Upgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XephyrUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libxkbcommon-devel | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade gdmUpgrade libX11Upgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-wacomUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade libxkbcommonUpgrade mesa-libGLw-develUpgrade libxkbcommon-x11Upgrade gdm-develUpgrade mesa-libGLwUpgrade xorg-x11-drv-atiUpgrade libX11-commonUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade libxkbcommon-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade xorg-x11-server-sourceUpgrade libxkbcommonUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade gdmUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLw-debuginfoUpgrade gdm-develUpgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-atiUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-ati-debuginfoNo solution existsUpgrade libX11-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libGLwUpgrade libxkbcommon-x11Upgrade gdm-pam-extensions-develUpgrade libX11Upgrade libxkbcommon-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-vesaUpgrade libX11-commonUpgrade gdm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacom | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-present0-32bitUpgrade libxcb-shm0-32bitUpgrade libx11-6-32bitUpgrade libxcb-composite0Upgrade libxcb-dri3-0Upgrade libxcb1Upgrade libxcb-devel-docUpgrade xorg-x11-libx11Upgrade libxcb-present0Upgrade libx11-xcb1Upgrade libxcb-dpms0Upgrade xorg-x11-libX11-x86Upgrade libxcb-xevie0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-glx0Upgrade libxcb-xv0Upgrade libxcb-render0Upgrade libxcb-shm0Upgrade libxcb-dri2-0Upgrade libx11-6Upgrade libxcb-xprint0Upgrade libxcb-record0Upgrade xorg-x11-libX11-devel-32bitUpgrade libxcb-xtest0Upgrade libxcb-xinerama0Upgrade libx11-xcb1-32bitUpgrade libxcb1-32bitUpgrade libx11-dataUpgrade libxcb-dri3-0-32bitUpgrade libxcb-sync1-32bitUpgrade libxcb-xfixes0-32bitUpgrade libx11-develUpgrade libxcb-shape0Upgrade libxcb-xfixes0Upgrade libxcb-randr0Upgrade libxcb-screensaver0Upgrade libxcb-sync1Upgrade xorg-x11-libX11-develUpgrade libxcb-render0-32bitUpgrade libx11-devel-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-glx0-32bitUpgrade libxcb-res0Upgrade libxcb-damage0Upgrade libxcb-xf86dri0Upgrade libxcb-xkb1-32bitUpgrade libxcb-develUpgrade libxcb-xvmc0Upgrade libxcb-xkb1 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-devUpgrade libx11-6 | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub