An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade libX11-develUpgrade xorg-x11-server-commonUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade libX11-debuginfoUpgrade libX11-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XdmxUpgrade libxkbcommon-develUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-vesa-debuginfoUpgrade gdm-debuginfoUpgrade libX11-commonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLwUpgrade libX11Upgrade libxkbcommon-debuginfoUpgrade gdm-pam-extensions-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-commonUpgrade libX11-debuginfoUpgrade gdm-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade gdmUpgrade libX11-develUpgrade libxkbcommonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-ati-debuginfoUpgrade libxkbcommon-x11-develUpgrade mesa-libGLw-debuginfo | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XdmxUpgrade mesa-libGLw-develUpgrade libxkbcommonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade gdm-develUpgrade gdm-pam-extensions-develUpgrade libX11Upgrade xorg-x11-server-XnestUpgrade gdmUpgrade libX11-develUpgrade xorg-x11-drv-atiUpgrade libxkbcommon-develUpgrade xorg-x11-server-XvfbUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLwUpgrade libX11-commonUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade libxkbcommon-x11 | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libGLwUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-develUpgrade gdm-debuginfoUpgrade libX11-develUpgrade mesa-libGLw-develNo solution existsUpgrade libX11-commonUpgrade xorg-x11-server-XwaylandUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-ati-debuginfoUpgrade libX11-debuginfoUpgrade libxkbcommonUpgrade libxkbcommon-x11-develUpgrade libxkbcommon-debuginfoUpgrade gdmUpgrade xorg-x11-drv-wacom-debuginfoUpgrade gdm-pam-extensions-develUpgrade gdm-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade xorg-x11-server-XvfbUpgrade mesa-libGLw-debuginfo | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libx11-6-32bitUpgrade libxcb-shm0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-dri2-0Upgrade libxcb-xfixes0Upgrade libx11-xcb1Upgrade libxcb-devel-docUpgrade libxcb-xinerama0Upgrade xorg-x11-libX11-devel-32bitUpgrade libxcb-dpms0Upgrade libxcb-xtest0Upgrade libxcb-render0Upgrade libx11-6Upgrade xorg-x11-libX11-x86Upgrade libx11-dataUpgrade libxcb-glx0Upgrade libxcb-damage0Upgrade libxcb-dri3-0-32bitUpgrade libxcb-present0Upgrade libxcb-record0Upgrade libxcb-xfixes0-32bitUpgrade libxcb1-32bitUpgrade libx11-xcb1-32bitUpgrade libx11-develUpgrade libx11-devel-32bitUpgrade libxcb-xkb1-32bitUpgrade libxcb-screensaver0Upgrade libxcb-xevie0Upgrade xorg-x11-libx11Upgrade libxcb-dri3-0Upgrade libxcb-xvmc0Upgrade libxcb-xprint0Upgrade libxcb-xv0Upgrade libxcb-sync1Upgrade libxcb-develUpgrade libxcb-shm0Upgrade libxcb-res0Upgrade libxcb-render0-32bitUpgrade libxcb-shape0Upgrade xorg-x11-libX11-develUpgrade libxcb-glx0-32bitUpgrade libxcb-xf86dri0Upgrade libxcb-composite0Upgrade libxcb-xkb1Upgrade libxcb-sync1-32bitUpgrade xorg-x11-libx11-32bitUpgrade libxcb-randr0Upgrade libxcb1 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-devUpgrade libx11-6 | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub