xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xorg-x11Upgrade xorg-x11-twmUpgrade xorg-x11-toolsUpgrade xorg-x11-Mesa-libGLUpgrade xorg-x11-deprecated-libsUpgrade xorg-x11-xauthUpgrade xorg-x11-Mesa-libGLUUpgrade xorg-x11-server-utilsUpgrade xorg-x11-xdmUpgrade xorg-x11-XdmxUpgrade xorg-x11-XvfbUpgrade xorg-x11-xfsUpgrade xorg-x11-font-utilsUpgrade xorg-x11-deprecated-libs-develUpgrade xorg-x11-sdkUpgrade xorg-x11-libsUpgrade xorg-x11-XnestUpgrade xorg-x11-docUpgrade xorg-x11-devel | Dec 1, 2016 | Apr 8, 2011 |
| Debian | — | Upgrade x11-xserver-utils | Jul 30, 2024 | Apr 8, 2011 |
| Freebsd | — | Upgrade xrdb | Dec 10, 2025 | Apr 14, 2011 |
| Gentoo Linux | — | Upgrade sys-apps/shadow.Upgrade games-sports/racer-bin.Upgrade media-sound/lastfmplayer.Upgrade dev-php/PEAR-PEAR.Upgrade app-admin/syslog-ng.Upgrade dev-libs/xmlsec.Upgrade net-libs/libsoup.Upgrade gnome-base/gdm.Upgrade net-misc/vino.Upgrade net-misc/mrouted.Upgrade media-libs/fmod.Upgrade media-libs/xine-lib.Upgrade x11-apps/xrdb.Upgrade net-libs/webkit-gtk.Upgrade app-office/gnucash.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/rsync.Upgrade sys-fs/lvm2.Upgrade sys-cluster/resource-agents.Upgrade net-analyzer/sflowtool.Upgrade dev-util/qt-creator.Upgrade app-misc/ca-certificates.Upgrade dev-vcs/gitolite.Upgrade dev-util/oprofile.Upgrade dev-db/unixODBC. | Oct 30, 2017 | Apr 8, 2011 |
| Oracle_linux | — | Upgrade xorg-x11-server-utils | Oct 16, 2024 | Apr 8, 2011 |
| Suse | — | Upgrade xorg-x11-essentialsUpgrade xorg-x11-xauthUpgrade xorg-x11Upgrade xrdb | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade x11-xserver-utils | Nov 8, 2024 | Apr 8, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub