An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade libX11-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-source | Apr 27, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade libX11Upgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-drv-wacomUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XvfbUpgrade libxkbcommon-develUpgrade libxkbcommonUpgrade xorg-x11-server-sourceUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGLwUpgrade mesa-libGLw-debuginfoUpgrade gdm-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade libX11-commonUpgrade xorg-x11-drv-atiUpgrade gdmUpgrade libX11-develUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libxkbcommon-x11Upgrade gdm-devel | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade gdm-develUpgrade libxkbcommon-x11Upgrade libxkbcommon-develUpgrade libxkbcommon-x11-develUpgrade libX11-commonUpgrade libX11-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade mesa-libGLwUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-wacomUpgrade gdm-pam-extensions-develUpgrade gdmUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLw-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade libxkbcommon | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade mesa-libGLw-develUpgrade libX11-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-vesaUpgrade gdm-debuginfoUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-develUpgrade libX11Upgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade gdm-develUpgrade gdmUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XorgUpgrade libX11-debuginfoUpgrade mesa-libGLwUpgrade libxkbcommon-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacom-debuginfoUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libxkbcommonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandNo solution existsUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-ati | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-xkb1-32bitUpgrade libxcb-damage0Upgrade libx11-dataUpgrade libxcb-xkb1Upgrade libxcb-res0Upgrade libxcb-render0-32bitUpgrade libxcb1-32bitUpgrade libxcb-xf86dri0Upgrade libxcb-xvmc0Upgrade libxcb-dri3-0-32bitUpgrade libx11-develUpgrade libxcb-sync1-32bitUpgrade libxcb-develUpgrade libx11-devel-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-screensaver0Upgrade libxcb-glx0-32bitUpgrade libxcb-xfixes0-32bitUpgrade libxcb-xfixes0Upgrade libxcb-sync1Upgrade libxcb-shape0Upgrade libxcb-randr0Upgrade xorg-x11-libX11-develUpgrade libxcb-devel-docUpgrade libxcb-dri2-0Upgrade xorg-x11-libX11-devel-32bitUpgrade libxcb-dpms0Upgrade libxcb-xtest0Upgrade libx11-6-32bitUpgrade libxcb-xv0Upgrade libxcb-present0Upgrade xorg-x11-libx11-32bitUpgrade libxcb-composite0Upgrade xorg-x11-libX11-x86Upgrade libxcb-dri3-0Upgrade libxcb-shm0Upgrade libxcb-glx0Upgrade libxcb-render0Upgrade libx11-xcb1-32bitUpgrade libxcb-xprint0Upgrade libxcb-record0Upgrade libx11-6Upgrade libxcb-xevie0Upgrade xorg-x11-libx11Upgrade libx11-xcb1Upgrade libxcb1Upgrade libxcb-present0-32bitUpgrade libxcb-xinerama0Upgrade libxcb-shm0-32bit | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-dev | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub