An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libx11 | Oct 10, 2018 | Aug 24, 2018 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr | Jun 4, 2020 | Aug 24, 2018 |
| Centos_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade mesa-libGLw-develUpgrade xorg-x11-server-sourceUpgrade libxkbcommon-develUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XwaylandUpgrade libxkbcommonUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XdmxUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-atiUpgrade gdm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libX11-debuginfoUpgrade libX11-commonUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade gdmUpgrade gdm-develUpgrade libX11Upgrade xorg-x11-server-develUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-drv-ati-debuginfoUpgrade mesa-libGLw | Aug 28, 2019 | Aug 24, 2018 |
| Debian | — | Upgrade libx11 | Feb 19, 2019 | Aug 24, 2018 |
| Freebsd | — | Upgrade libX11 | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Nov 9, 2018 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Dec 18, 2019 | Aug 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Dec 11, 2019 | Aug 24, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3 | Nov 19, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade mesa-libGLw-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-atiUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-develUpgrade libX11-develUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLwUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade xorg-x11-drv-wacomUpgrade libX11Upgrade xorg-x11-server-develUpgrade gdm-pam-extensions-develUpgrade libxkbcommonUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade gdm-develUpgrade gdmUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-Xdmx | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-develUpgrade xorg-x11-server-XorgUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade gdm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-x11Upgrade xorg-x11-server-debuginfoUpgrade libX11No solution existsUpgrade mesa-libGLwUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-ati-debuginfoUpgrade gdmUpgrade libX11-develUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade xorg-x11-server-develUpgrade libxkbcommon-x11-develUpgrade libxkbcommonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-commonUpgrade xorg-x11-drv-atiUpgrade libX11-debuginfoUpgrade gdm-develUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-Xwayland | Aug 7, 2019 | Aug 24, 2018 |
| Suse | — | Upgrade libxcb-xv0Upgrade libx11-dataUpgrade libxcb-shm0-32bitUpgrade xorg-x11-libx11-32bitUpgrade libx11-develUpgrade libxcb-render0Upgrade libx11-6-32bitUpgrade libxcb-glx0Upgrade libxcb-render0-32bitUpgrade libxcb-res0Upgrade libxcb-dri2-0Upgrade libx11-xcb1-32bitUpgrade libxcb-randr0Upgrade libxcb-xkb1Upgrade libxcb1-32bitUpgrade libxcb-devel-docUpgrade libxcb-present0-32bitUpgrade xorg-x11-libX11-devel-32bitUpgrade xorg-x11-libX11-x86Upgrade libxcb-dri3-0Upgrade libxcb-xtest0Upgrade libxcb-record0Upgrade libxcb1Upgrade libx11-devel-32bitUpgrade libxcb-xinerama0Upgrade libxcb-develUpgrade libxcb-xf86dri0Upgrade libxcb-xfixes0-32bitUpgrade libxcb-dri3-0-32bitUpgrade libx11-6Upgrade xorg-x11-libx11Upgrade libxcb-dri2-0-32bitUpgrade libxcb-sync1-32bitUpgrade libx11-xcb1Upgrade libxcb-present0Upgrade libxcb-dpms0Upgrade libxcb-shm0Upgrade libxcb-damage0Upgrade libxcb-screensaver0Upgrade libxcb-xfixes0Upgrade libxcb-xvmc0Upgrade libxcb-shape0Upgrade libxcb-xprint0Upgrade libxcb-xevie0Upgrade libxcb-glx0-32bitUpgrade libxcb-sync1Upgrade xorg-x11-libX11-develUpgrade libxcb-xkb1-32bitUpgrade libxcb-composite0 | Sep 1, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-dev | Sep 13, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub