An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfo | Jun 4, 2020 | Aug 25, 2018 |
| Centos_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-wacom-develUpgrade mesa-libGLw-develUpgrade libxkbcommon-x11Upgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-commonUpgrade xorg-x11-server-XdmxUpgrade gdm-debuginfoUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-debuginfoUpgrade libxkbcommon-develUpgrade libX11-debuginfoUpgrade mesa-libGLwUpgrade xorg-x11-server-XephyrUpgrade libxkbcommon-x11-develUpgrade gdmUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-wacom-debuginfoUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-server-commonUpgrade gdm-develUpgrade xorg-x11-server-XvfbUpgrade libX11Upgrade gdm-pam-extensions-develUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-drv-atiUpgrade libxkbcommonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-ati-debuginfoUpgrade libX11-devel | Aug 28, 2019 | Aug 25, 2018 |
| Debian | — | Upgrade libxkbcommon | Jul 30, 2024 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libxkbcommon. | Oct 31, 2018 | Aug 25, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxkbcommonUpgrade libxkbcommon-x11Upgrade libxkbcommon-devel | Dec 16, 2020 | Aug 25, 2018 |
| Oracle Solaris | — | Upgrade x11/session/xauth to version 1.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/font-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/sessreg to version 1.1.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/graphics/cogl to version 1.22.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libfontenc to version 1.1.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxi to version 1.7.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/diagnostic/x11-info-clients to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade image/editor/bitmap to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxkbcommon to version 0.8.4-11.4.17.0.1.1.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/x11-server-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xclock to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libice to version 1.0.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xt-resource-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 25, 2018 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade gdm-pam-extensions-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade libxkbcommonUpgrade gdmUpgrade xorg-x11-drv-vesaUpgrade mesa-libGLw-develUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade libxkbcommon-x11Upgrade gdm-develUpgrade xorg-x11-server-XvfbUpgrade libX11-commonUpgrade mesa-libGLwUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-develUpgrade libX11-devel | Jul 21, 2020 | Mar 12, 2018 |
| Redhat_linux | — | Upgrade gdm-debuginfoUpgrade libX11-develUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-develUpgrade xorg-x11-server-XephyrUpgrade libX11-commonUpgrade gdm-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLwUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-atiUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XorgUpgrade gdmUpgrade libX11-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-ati-debuginfoUpgrade gdm-pam-extensions-develUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-commonUpgrade libxkbcommonUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade mesa-libGLw-develUpgrade mesa-libGLw-debuginfo | Aug 7, 2019 | Aug 25, 2018 |
| Suse | — | Upgrade libxkbcommon0-32bitUpgrade libxkbcommon0Upgrade libxkbcommon-develUpgrade libxkbcommon-x11-develUpgrade libxkbcommon-devel-32bitUpgrade libxkbcommon-x11-0-32bitUpgrade libxkbcommon-x11-devel-32bitUpgrade libxkbcommon-x11-0 | Nov 17, 2018 | Aug 25, 2018 |
| Ubuntu | — | Upgrade libxkbcommon0Upgrade libxkbcommon-x11-0 | Oct 17, 2018 | Aug 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub