An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr | Jun 4, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade gdm-pam-extensions-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libxkbcommon-develUpgrade xorg-x11-server-sourceUpgrade mesa-libGLw-develUpgrade libxkbcommonUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libX11-commonUpgrade gdmUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-x11Upgrade libX11-debuginfoUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade mesa-libGLw-debuginfoUpgrade gdm-develUpgrade libX11Upgrade mesa-libGLwUpgrade gdm-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-drv-ati | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Dec 11, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade libxkbcommonUpgrade gdmUpgrade xorg-x11-server-XvfbUpgrade libxkbcommon-x11-develUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade gdm-develUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLw-develUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-develUpgrade xorg-x11-drv-vesaUpgrade libX11-develUpgrade mesa-libGLwUpgrade libX11-commonUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-drv-ati | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade mesa-libGLw-develNo solution existsUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade xorg-x11-server-debuginfoUpgrade gdm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-wacomUpgrade libxkbcommon-develUpgrade mesa-libGLwUpgrade libX11-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XvfbUpgrade gdmUpgrade xorg-x11-server-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-x11-develUpgrade gdm-develUpgrade libxkbcommonUpgrade mesa-libGLw-debuginfoUpgrade libX11-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade gdm-pam-extensions-develUpgrade xorg-x11-drv-ati-debuginfo | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-shm0-32bitUpgrade libx11-develUpgrade libxcb1Upgrade libx11-6-32bitUpgrade libxcb-glx0Upgrade xorg-x11-libX11-x86Upgrade libxcb-randr0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-xkb1Upgrade libx11-dataUpgrade libxcb1-32bitUpgrade libxcb-render0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-render0Upgrade libxcb-devel-docUpgrade libxcb-xtest0Upgrade libxcb-record0Upgrade libxcb-res0Upgrade libxcb-dri2-0Upgrade xorg-x11-libX11-devel-32bitUpgrade libxcb-dri3-0Upgrade libxcb-xv0Upgrade libx11-xcb1-32bitUpgrade libxcb-composite0Upgrade xorg-x11-libX11-develUpgrade libx11-devel-32bitUpgrade libxcb-develUpgrade libxcb-xinerama0Upgrade libxcb-glx0-32bitUpgrade libxcb-xevie0Upgrade libxcb-dri3-0-32bitUpgrade libxcb-xvmc0Upgrade libxcb-xkb1-32bitUpgrade libxcb-xprint0Upgrade libxcb-shm0Upgrade libxcb-damage0Upgrade libxcb-xfixes0Upgrade libxcb-sync1Upgrade libxcb-present0Upgrade libxcb-screensaver0Upgrade libxcb-dri2-0-32bitUpgrade libxcb-shape0Upgrade libxcb-sync1-32bitUpgrade libx11-xcb1Upgrade libx11-6Upgrade xorg-x11-libx11Upgrade libxcb-xfixes0-32bitUpgrade libxcb-dpms0Upgrade libxcb-xf86dri0 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-dev | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub