Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb | Jun 4, 2020 | Aug 25, 2018 |
| Centos_linux | — | Upgrade gdmUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade mesa-libGLw-debuginfoUpgrade xorg-x11-server-commonUpgrade gdm-develUpgrade libxkbcommonUpgrade xorg-x11-drv-ati-debuginfoUpgrade gdm-pam-extensions-develUpgrade libxkbcommon-x11-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-drv-wacom-debuginfoUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade libX11-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-drv-wacomUpgrade libxkbcommon-develUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-drv-vesaUpgrade gdm-debuginfoUpgrade xorg-x11-drv-vesa-debuginfoUpgrade mesa-libGLwUpgrade libX11-develUpgrade libxkbcommon-x11Upgrade mesa-libGLw-develUpgrade xorg-x11-drv-atiUpgrade xorg-x11-server-Xnest | Aug 28, 2019 | Aug 25, 2018 |
| Debian | — | Upgrade libxkbcommon | Jul 30, 2024 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade x11-libs/libxkbcommon. | Oct 31, 2018 | Aug 25, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxkbcommonUpgrade libxkbcommon-x11Upgrade libxkbcommon-devel | Dec 11, 2019 | Aug 25, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libice to version 1.0.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/font-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/graphics/cogl to version 1.22.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xt-resource-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/xauth to version 1.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade image/editor/bitmap to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxi to version 1.7.10-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libxkbcommon to version 0.8.4-11.4.17.0.1.1.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/diagnostic/x11-info-clients to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/library/libfontenc to version 1.1.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/xclock to version 1.0.9-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/x11-server-utilities to version 7.7-11.4.21.0.1.69.0 on Solaris 11.4Upgrade x11/session/sessreg to version 1.1.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 25, 2018 |
| Oracle_linux | — | Upgrade libxkbcommon-x11-develUpgrade libX11-develUpgrade xorg-x11-drv-wacomUpgrade libX11-commonUpgrade xorg-x11-drv-wacom-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLw-develUpgrade xorg-x11-server-sourceUpgrade mesa-libGLwUpgrade libxkbcommon-develUpgrade gdm-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-drv-atiUpgrade gdmUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-drv-vesaUpgrade libxkbcommonUpgrade libX11Upgrade libxkbcommon-x11Upgrade gdm-pam-extensions-develUpgrade xorg-x11-server-Xwayland | Jul 21, 2020 | Jun 26, 2017 |
| Redhat_linux | — | Upgrade xorg-x11-drv-vesaUpgrade xorg-x11-drv-atiUpgrade mesa-libGLwUpgrade mesa-libGLw-develUpgrade xorg-x11-drv-wacomUpgrade xorg-x11-server-XnestUpgrade gdm-pam-extensions-develUpgrade gdm-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade libxkbcommon-develUpgrade xorg-x11-server-XwaylandUpgrade gdm-develUpgrade xorg-x11-drv-wacom-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfoUpgrade libxkbcommon-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-drv-vesa-debuginfoUpgrade libX11Upgrade mesa-libGLw-debuginfoUpgrade libX11-debuginfoUpgrade libxkbcommonUpgrade xorg-x11-drv-wacom-develUpgrade libxkbcommon-x11Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade libX11-commonUpgrade xorg-x11-server-sourceUpgrade gdmUpgrade libxkbcommon-x11-develUpgrade xorg-x11-drv-ati-debuginfo | Aug 7, 2019 | Aug 25, 2018 |
| Suse | — | Upgrade libxkbcommon-x11-devel-32bitUpgrade libxkbcommon-devel-32bitUpgrade libxkbcommon-x11-0Upgrade libxkbcommon0Upgrade libxkbcommon-x11-develUpgrade libxkbcommon-x11-0-32bitUpgrade libxkbcommon0-32bitUpgrade libxkbcommon-devel | Nov 17, 2018 | Aug 25, 2018 |
| Ubuntu | — | Upgrade libxkbcommon-x11-0Upgrade libxkbcommon0 | Oct 17, 2018 | Aug 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub