The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxv | Sep 20, 2017 | Dec 13, 2016 |
| Debian | — | Upgrade libxv | Mar 31, 2017 | Oct 19, 2016 |
| Freebsd | — | Upgrade libXtstUpgrade libXvUpgrade libXrandrUpgrade libX11Upgrade libXiUpgrade libXfixesUpgrade libXrenderUpgrade libXvMC | Nov 14, 2016 | Oct 7, 2016 |
| Gentoo Linux | — | Upgrade x11-libs/libXv.Upgrade x11-libs/libXi.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libXrender.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libXfixes.Upgrade x11-libs/libICE. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade x11/library/libxfixes to version 5.0.1-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxvmc to version 1.0.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxtst to version 1.2.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrandr to version 1.4.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxv to version 1.0.10-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrender to version 0.9.8-0.175.3.15.0.3.1517 on Solaris 11.3 | May 29, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade mesa-libGLUpgrade vulkan-filesystemUpgrade libxkbcommonUpgrade libXfont2-develUpgrade libdrmUpgrade libxcb-docUpgrade libXrandr-develUpgrade libevdev-utilsUpgrade mesa-libxatrackerUpgrade mesa-libOSMesaUpgrade drm-utilsUpgrade mesaUpgrade libXt-develUpgrade xcb-protoUpgrade libxcbUpgrade mesa-libGLESUpgrade libXaw-develUpgrade libdrm-develUpgrade libwacomUpgrade libxkbfileUpgrade mesa-libxatracker-develUpgrade libxkbfile-develUpgrade mesa-libglapiUpgrade libepoxyUpgrade libxcb-develUpgrade libvdpau-docsUpgrade mesa-private-llvmUpgrade libXrandrUpgrade libXfont2Upgrade libXvUpgrade mesa-dri-driversUpgrade mesa-libEGL-develUpgrade libevdevUpgrade mesa-filesystemUpgrade libXv-develUpgrade libwacom-dataUpgrade libXvMCUpgrade libvdpau-develUpgrade libXcursor-develUpgrade libXpm-develUpgrade vulkanUpgrade mesa-vulkan-driversUpgrade libX11Upgrade mesa-libGLES-develUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade libXpmUpgrade mesa-libgbm-develUpgrade libvdpauUpgrade libXi-develUpgrade xorg-x11-proto-develUpgrade libinput-develUpgrade xkeyboard-config-develUpgrade libXrenderUpgrade libX11-commonUpgrade libinputUpgrade libxkbcommon-x11-develUpgrade libXcursorUpgrade libICE-develUpgrade libfontencUpgrade libXfixes-develUpgrade libXfixesUpgrade mesa-libgbmUpgrade libX11-develUpgrade libXtUpgrade libXawUpgrade mesa-libOSMesa-develUpgrade libxkbcommon-x11Upgrade libXtstUpgrade libXiUpgrade libXfontUpgrade xkeyboard-configUpgrade libxkbcommon-develUpgrade libevdev-develUpgrade mesa-private-llvm-develUpgrade libXxf86vm-develUpgrade libXdmcpUpgrade libXdmcp-develUpgrade libfontenc-develUpgrade libXxf86vmUpgrade vulkan-develUpgrade libXtst-develUpgrade libICEUpgrade libXvMC-develUpgrade libXfont-develUpgrade libepoxy-develUpgrade mesa-libEGLUpgrade libXrender-devel | Aug 8, 2017 | Dec 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2016 |
| Suse | — | Upgrade xorg-x11-libXvUpgrade libXrender1Upgrade libXtst6-32bitUpgrade libXrender1-32bitUpgrade libXi6Upgrade libXtst6Upgrade libx11-xcb1Upgrade libXfixes3Upgrade libx11-6-32bitUpgrade libx11-6Upgrade libXrandr2Upgrade libXvMC-develUpgrade libXrandr-develUpgrade libXi-develUpgrade xorg-x11-libXv-devel-32bitUpgrade libXrender-develUpgrade libXv-develUpgrade libXvMC1Upgrade libXi6-32bitUpgrade xorg-x11-libXv-x86Upgrade libXrandr2-32bitUpgrade libx11-dataUpgrade xorg-x11-libXv-32bitUpgrade libx11-xcb1-32bitUpgrade xorg-x11-libXv-develUpgrade libXv1-32bitUpgrade libXv1Upgrade libXfixes-develUpgrade libXfixes3-32bitUpgrade libXtst-develUpgrade libx11-devel | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade libxv1 (Ubuntu Pro) | May 27, 2022 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub