An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libX11-commonUpgrade libX11Upgrade xorg-x11-server-XnestUpgrade libX11-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade libX11-develUpgrade xorg-x11-server-debuginfo | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade xorg-x11-server-XephyrUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libxkbcommon-debuginfoUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-wacomUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade libxkbcommon-develUpgrade libxkbcommonUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade gdm-debuginfoUpgrade gdm-develUpgrade libxkbcommon-x11Upgrade mesa-libGLw-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-debuginfoUpgrade xorg-x11-drv-atiUpgrade gdmUpgrade libX11-commonUpgrade mesa-libGLw | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade gdm-pam-extensions-develUpgrade gdmUpgrade mesa-libGLw-develUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-vesaUpgrade libxkbcommonUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-x11-develUpgrade libX11-develUpgrade gdm-develUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade xorg-x11-server-XephyrUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-develUpgrade mesa-libGLwUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade mesa-libGLw-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-drv-wacomUpgrade libX11-commonUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XdmxUpgrade libX11Upgrade libxkbcommon-develUpgrade gdm-debuginfoUpgrade gdm-pam-extensions-develUpgrade xorg-x11-drv-vesaNo solution existsUpgrade xorg-x11-drv-ati-debuginfoUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade libxkbcommon-debuginfoUpgrade mesa-libGLw-debuginfoUpgrade gdmUpgrade gdm-develUpgrade libX11-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLwUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-atiUpgrade libxkbcommonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-source | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-dri2-0-32bitUpgrade libxcb-xkb1Upgrade libxcb1-32bitUpgrade libxcb-shape0Upgrade libx11-dataUpgrade xorg-x11-libX11-develUpgrade libxcb-randr0Upgrade libxcb-xfixes0Upgrade libxcb-dri3-0-32bitUpgrade libx11-develUpgrade libx11-devel-32bitUpgrade libxcb-damage0Upgrade libxcb-screensaver0Upgrade libxcb-res0Upgrade libxcb-xfixes0-32bitUpgrade libxcb-sync1Upgrade libxcb-glx0-32bitUpgrade libxcb-sync1-32bitUpgrade libxcb-xkb1-32bitUpgrade libxcb-xvmc0Upgrade libxcb-render0-32bitUpgrade libxcb-xf86dri0Upgrade libxcb-develUpgrade libx11-xcb1-32bitUpgrade libxcb-xv0Upgrade libxcb-xevie0Upgrade libxcb-record0Upgrade libxcb-dri2-0Upgrade libxcb-glx0Upgrade libx11-6Upgrade libxcb-xprint0Upgrade libxcb-dri3-0Upgrade libxcb-composite0Upgrade libxcb-dpms0Upgrade libxcb-xinerama0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-present0Upgrade libx11-6-32bitUpgrade libxcb-xtest0Upgrade libxcb-present0-32bitUpgrade libxcb-devel-docUpgrade xorg-x11-libX11-devel-32bitUpgrade libx11-xcb1Upgrade xorg-x11-libx11Upgrade libxcb1Upgrade libxcb-shm0-32bitUpgrade xorg-x11-libX11-x86Upgrade libxcb-shm0Upgrade libxcb-render0 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-devUpgrade libx11-6 | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub