An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Jun 4, 2020 | Aug 25, 2018 |
| Centos_linux | — | Upgrade libxkbcommon-x11-develUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-vesa-debuginfoUpgrade xorg-x11-server-commonUpgrade gdmUpgrade xorg-x11-server-XvfbUpgrade libxkbcommonUpgrade xorg-x11-drv-atiUpgrade mesa-libGLwUpgrade gdm-pam-extensions-develUpgrade libxkbcommon-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-vesaUpgrade libxkbcommon-develUpgrade xorg-x11-server-XwaylandUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-sourceUpgrade mesa-libGLw-develUpgrade gdm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libX11-commonUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-ati-debuginfoUpgrade libX11Upgrade gdm-develUpgrade libX11-debuginfoUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-devel | Aug 28, 2019 | Aug 25, 2018 |
| Debian | — | Upgrade libxkbcommon | Jul 30, 2024 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libxkbcommon. | Oct 31, 2018 | Aug 25, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxkbcommon-develUpgrade libxkbcommon-x11Upgrade libxkbcommon | Dec 11, 2019 | Aug 25, 2018 |
| Oracle Solaris | — | Upgrade library/graphics/cogl to version 1.22.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xclock to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libice to version 1.0.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/x11-server-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxkbcommon to version 0.8.4-11.4.17.0.1.1.0 on Solaris 11.4Upgrade x11/xt-resource-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/font-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/xauth to version 1.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libfontenc to version 1.1.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade image/editor/bitmap to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/sessreg to version 1.1.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/diagnostic/x11-info-clients to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxi to version 1.7.10-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 25, 2018 |
| Oracle_linux | — | Upgrade gdmUpgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-x11Upgrade libX11Upgrade libX11-develUpgrade libX11-commonUpgrade gdm-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-drv-wacomUpgrade gdm-pam-extensions-develUpgrade libxkbcommon-develUpgrade mesa-libGLw-develUpgrade libxkbcommon-x11-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade libxkbcommonUpgrade mesa-libGLwUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-common | Jul 21, 2020 | Jul 30, 2018 |
| Redhat_linux | — | Upgrade xorg-x11-drv-ati-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libxkbcommon-x11Upgrade mesa-libGLw-develUpgrade libxkbcommon-x11-develUpgrade libxkbcommon-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-drv-wacom-develUpgrade gdm-debuginfoUpgrade xorg-x11-drv-wacomUpgrade mesa-libGLwUpgrade libX11-commonUpgrade libX11-develUpgrade xorg-x11-drv-atiUpgrade gdm-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade libX11-debuginfoUpgrade libxkbcommonUpgrade xorg-x11-server-XnestUpgrade gdm-pam-extensions-develUpgrade mesa-libGLw-debuginfoUpgrade libxkbcommon-debuginfoUpgrade gdmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade libX11Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-drv-vesaUpgrade xorg-x11-drv-vesa-debuginfo | Aug 7, 2019 | Aug 25, 2018 |
| Suse | — | Upgrade libxkbcommon-x11-0-32bitUpgrade libxkbcommon-x11-devel-32bitUpgrade libxkbcommon-x11-develUpgrade libxkbcommon0Upgrade libxkbcommon-x11-0Upgrade libxkbcommon0-32bitUpgrade libxkbcommon-devel-32bitUpgrade libxkbcommon-devel | Nov 17, 2018 | Aug 25, 2018 |
| Ubuntu | — | Upgrade libxkbcommon0Upgrade libxkbcommon-x11-0 | Oct 17, 2018 | Aug 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub