Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfo | Jun 4, 2020 | Aug 25, 2018 |
| Centos_linux | — | Upgrade mesa-libGLwUpgrade libxkbcommon-x11Upgrade gdm-pam-extensions-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-wacomUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XnestUpgrade libxkbcommon-develUpgrade gdm-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libX11-develUpgrade libX11-commonUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLw-debuginfoUpgrade gdmUpgrade gdm-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-ati-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libxkbcommon-debuginfoUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-commonUpgrade libxkbcommonUpgrade xorg-x11-server-develUpgrade libX11 | Aug 28, 2019 | Aug 25, 2018 |
| Debian | — | Upgrade libxkbcommon | Jul 30, 2024 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libxkbcommon. | Oct 31, 2018 | Aug 25, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxkbcommonUpgrade libxkbcommon-x11Upgrade libxkbcommon-devel | Dec 16, 2020 | Aug 25, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libxi to version 1.7.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxkbcommon to version 0.8.4-11.4.17.0.1.1.0 on Solaris 11.4Upgrade x11/session/sessreg to version 1.1.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade image/editor/bitmap to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libfontenc to version 1.1.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xclock to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/font-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/xauth to version 1.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libice to version 1.0.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/graphics/cogl to version 1.22.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/x11-server-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/diagnostic/x11-info-clients to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xt-resource-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 25, 2018 |
| Oracle_linux | — | Upgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade mesa-libGLw-develUpgrade libX11-commonUpgrade xorg-x11-server-XnestUpgrade libxkbcommonUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade gdm-develUpgrade gdm-pam-extensions-develUpgrade libX11-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLwUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade libxkbcommon-x11-develUpgrade libxkbcommon-develUpgrade xorg-x11-server-XephyrUpgrade gdmUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-ati | Jul 21, 2020 | Mar 10, 2018 |
| Redhat_linux | — | Upgrade libxkbcommonUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade libX11-debuginfoUpgrade xorg-x11-drv-ati-debuginfoUpgrade mesa-libGLw-develUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-wacomUpgrade libX11Upgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-sourceUpgrade gdm-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-atiUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libX11-develUpgrade mesa-libGLw-debuginfoUpgrade libxkbcommon-develUpgrade gdm-debuginfoUpgrade libX11-commonUpgrade mesa-libGLwUpgrade gdmUpgrade xorg-x11-drv-wacom-develUpgrade gdm-pam-extensions-devel | Aug 7, 2019 | Aug 25, 2018 |
| Suse | — | Upgrade libxkbcommon-devel-32bitUpgrade libxkbcommon-x11-devel-32bitUpgrade libxkbcommon0-32bitUpgrade libxkbcommon-x11-0Upgrade libxkbcommon-develUpgrade libxkbcommon-x11-0-32bitUpgrade libxkbcommon0Upgrade libxkbcommon-x11-devel | Nov 17, 2018 | Aug 25, 2018 |
| Ubuntu | — | Upgrade libxkbcommon0Upgrade libxkbcommon-x11-0 | Oct 17, 2018 | Aug 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub