An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade libX11-develUpgrade xorg-x11-server-XdmxUpgrade libX11-commonUpgrade libX11-debuginfoUpgrade xorg-x11-server-common | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade gdm-pam-extensions-develUpgrade mesa-libGLw-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade libxkbcommonUpgrade libX11Upgrade xorg-x11-drv-wacomUpgrade libxkbcommon-debuginfoUpgrade libxkbcommon-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libX11-commonUpgrade libxkbcommon-x11Upgrade gdm-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLw-debuginfoUpgrade libX11-develUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-drv-atiUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade gdmUpgrade mesa-libGLwUpgrade xorg-x11-server-debuginfoUpgrade gdm-devel | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade libxkbcommonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade libX11Upgrade gdmUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLw-develUpgrade gdm-pam-extensions-develUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-atiUpgrade libX11-develUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade xorg-x11-server-develUpgrade xorg-x11-drv-wacom-develUpgrade gdm-develUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLwUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade libxkbcommon-x11-develUpgrade libX11-common | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade gdm-debuginfoUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-develUpgrade mesa-libGLw-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade libX11-commonUpgrade libX11Upgrade xorg-x11-drv-vesaUpgrade libxkbcommon-x11No solution existsUpgrade libxkbcommon-debuginfoUpgrade libxkbcommonUpgrade mesa-libGLwUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade libX11-develUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-XvfbUpgrade gdm-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-drv-atiUpgrade gdm | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-damage0Upgrade libxcb-sync1Upgrade libxcb-screensaver0Upgrade xorg-x11-libX11-develUpgrade libxcb-shape0Upgrade libxcb-dri2-0-32bitUpgrade libx11-develUpgrade libxcb-xfixes0-32bitUpgrade libxcb-xfixes0Upgrade libx11-devel-32bitUpgrade libxcb-render0-32bitUpgrade libx11-dataUpgrade libxcb-glx0-32bitUpgrade libxcb1-32bitUpgrade libxcb-xkb1Upgrade libxcb-xf86dri0Upgrade libxcb-randr0Upgrade libxcb-sync1-32bitUpgrade libxcb-dri3-0-32bitUpgrade libxcb-res0Upgrade libxcb-develUpgrade libxcb-xvmc0Upgrade libxcb-xkb1-32bitUpgrade libxcb-xprint0Upgrade libxcb-xv0Upgrade libxcb-present0-32bitUpgrade libx11-6Upgrade libx11-xcb1-32bitUpgrade libxcb-record0Upgrade libxcb-shm0-32bitUpgrade libxcb-composite0Upgrade libxcb-dri3-0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-present0Upgrade libxcb-xinerama0Upgrade xorg-x11-libX11-x86Upgrade libxcb-dri2-0Upgrade libx11-xcb1Upgrade xorg-x11-libX11-devel-32bitUpgrade xorg-x11-libx11Upgrade libxcb-devel-docUpgrade libxcb-glx0Upgrade libxcb-dpms0Upgrade libxcb1Upgrade libxcb-xevie0Upgrade libxcb-shm0Upgrade libxcb-render0Upgrade libx11-6-32bitUpgrade libxcb-xtest0 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-devUpgrade libx11-6 | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub