An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb | Jun 4, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade libxkbcommonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade mesa-libGLw-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-drv-ati-debuginfoUpgrade gdm-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade gdm-develUpgrade libX11-debuginfoUpgrade libxkbcommon-x11Upgrade mesa-libGLwUpgrade libX11-commonUpgrade libX11Upgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XdmxUpgrade gdm | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Dec 11, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade libX11Upgrade xorg-x11-server-XdmxUpgrade gdm-develUpgrade gdmUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade libxkbcommonUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-develUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-sourceUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-develUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-x11Upgrade libX11-commonUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLw | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | No solution existsUpgrade xorg-x11-server-XdmxUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-wacomUpgrade mesa-libGLw-develUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade libxkbcommon-develUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-debuginfoUpgrade gdm-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade gdmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libX11-commonUpgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-sourceUpgrade libX11-develUpgrade gdm-pam-extensions-develUpgrade mesa-libGLw-debuginfoUpgrade libxkbcommonUpgrade xorg-x11-drv-vesaUpgrade libX11-debuginfoUpgrade gdm-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLwUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-devel | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-dri2-0-32bitUpgrade libxcb-damage0Upgrade libx11-6Upgrade xorg-x11-libx11Upgrade libxcb-xvmc0Upgrade libxcb-dri3-0-32bitUpgrade libxcb-shape0Upgrade xorg-x11-libX11-develUpgrade libxcb-xfixes0-32bitUpgrade libxcb-xinerama0Upgrade libxcb-dpms0Upgrade libxcb-screensaver0Upgrade libxcb-develUpgrade libxcb-present0Upgrade libxcb-xf86dri0Upgrade libx11-xcb1Upgrade libx11-devel-32bitUpgrade libxcb-xkb1-32bitUpgrade libxcb-composite0Upgrade libxcb-sync1-32bitUpgrade libxcb-xprint0Upgrade libxcb-glx0-32bitUpgrade libxcb-sync1Upgrade libxcb-shm0Upgrade libxcb-xfixes0Upgrade libxcb-xevie0Upgrade xorg-x11-libX11-devel-32bitUpgrade libxcb-shm0-32bitUpgrade libxcb-randr0Upgrade xorg-x11-libx11-32bitUpgrade libx11-develUpgrade libxcb-xkb1Upgrade libxcb1Upgrade libxcb-render0Upgrade libx11-6-32bitUpgrade libxcb-record0Upgrade libxcb1-32bitUpgrade libxcb-glx0Upgrade xorg-x11-libX11-x86Upgrade libxcb-xtest0Upgrade libxcb-dri3-0Upgrade libxcb-xv0Upgrade libxcb-render0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-res0Upgrade libxcb-dri2-0Upgrade libx11-dataUpgrade libx11-xcb1-32bitUpgrade libxcb-devel-doc | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-dev | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub