An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libX11-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade libX11Upgrade libX11-commonUpgrade xorg-x11-server-XvfbUpgrade libX11-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade gdmUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libX11-debuginfoUpgrade libX11-develUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLwUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-atiUpgrade xorg-x11-drv-ati-debuginfoUpgrade mesa-libGLw-debuginfoUpgrade gdm-develUpgrade gdm-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-commonUpgrade xorg-x11-server-sourceUpgrade libxkbcommonUpgrade libxkbcommon-develUpgrade gdm-pam-extensions-develUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade libxkbcommon-x11-develUpgrade libX11Upgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XnestUpgrade mesa-libGLw-develUpgrade xorg-x11-server-Xwayland | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade mesa-libGLw-develUpgrade xorg-x11-server-XwaylandUpgrade libxkbcommonUpgrade xorg-x11-server-XorgUpgrade gdmUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-drv-vesaUpgrade gdm-pam-extensions-develUpgrade libX11Upgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XephyrUpgrade libxkbcommon-x11Upgrade gdm-develUpgrade mesa-libGLwUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-develUpgrade libX11-commonUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade libX11-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade gdm-pam-extensions-develUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-develUpgrade mesa-libGLw-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacomUpgrade libX11Upgrade gdm-debuginfoUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade libxkbcommon-x11Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoNo solution existsUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libX11-debuginfoUpgrade libxkbcommon-x11-develUpgrade libxkbcommon-debuginfoUpgrade gdm-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-atiUpgrade gdmUpgrade xorg-x11-drv-vesa-debuginfoUpgrade mesa-libGLwUpgrade xorg-x11-server-XvfbUpgrade libX11-develUpgrade libxkbcommon | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-shape0Upgrade libxcb-xf86dri0Upgrade libxcb-xvmc0Upgrade libxcb-sync1Upgrade libxcb-screensaver0Upgrade libxcb-xkb1-32bitUpgrade libxcb-xfixes0Upgrade libxcb-randr0Upgrade xorg-x11-libX11-develUpgrade libxcb-damage0Upgrade libxcb-xfixes0-32bitUpgrade libx11-develUpgrade libxcb-develUpgrade libx11-devel-32bitUpgrade libxcb-xkb1Upgrade libxcb-sync1-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-res0Upgrade libxcb-dri3-0-32bitUpgrade libx11-dataUpgrade libxcb-glx0-32bitUpgrade libxcb-render0-32bitUpgrade libxcb1-32bitUpgrade libxcb-devel-docUpgrade xorg-x11-libx11Upgrade libxcb-shm0Upgrade xorg-x11-libX11-devel-32bitUpgrade libx11-xcb1Upgrade libxcb-present0Upgrade libxcb-xv0Upgrade libxcb-dri2-0Upgrade libxcb-xprint0Upgrade libxcb-xinerama0Upgrade libxcb-shm0-32bitUpgrade libxcb-xtest0Upgrade libx11-6-32bitUpgrade libxcb-glx0Upgrade libxcb-xevie0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-render0Upgrade libxcb1Upgrade libxcb-dpms0Upgrade libxcb-present0-32bitUpgrade libxcb-record0Upgrade libx11-6Upgrade libx11-xcb1-32bitUpgrade libxcb-composite0Upgrade libxcb-dri3-0Upgrade xorg-x11-libX11-x86 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-dev | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub