An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libgbm-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-eglUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libglvnd-glxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade libglvndUpgrade libinput-develUpgrade xorg-x11-drivers | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade libx11 | Aug 22, 2024 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libX11Upgrade libX11-debuginfoUpgrade libX11-develUpgrade libX11-common | Jun 24, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libdrm-debuginfoUpgrade libdrm-develUpgrade libglvnd-develUpgrade libinput-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libglvndUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-vulkan-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libOSMesaUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade libwacom-dataUpgrade xorg-x11-server-XorgUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-glxUpgrade mesa-vulkan-driversUpgrade libwacomUpgrade egl-waylandUpgrade libdrmUpgrade libX11-xcb-debuginfoUpgrade mesa-debuginfoUpgrade egl-wayland-debuginfoUpgrade drm-utils-debuginfoUpgrade libinput-utilsUpgrade mesa-libEGL-develUpgrade libX11-commonUpgrade libglvnd-egl-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-glesUpgrade mesa-libEGLUpgrade mesa-libxatrackerUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XephyrUpgrade libinput-utils-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libX11-develUpgrade libglvnd-eglUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade libX11-debugsourceUpgrade libinput-test-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libgbmUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libinputUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-xcbUpgrade libwacom-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfo | Jun 1, 2021 | Aug 5, 2020 |
| Debian | — | Upgrade libx11 | Aug 5, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade libX11 | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Aug 28, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 3, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Oct 13, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade libinput-utilsUpgrade mesa-libGLUpgrade xorg-x11-server-XwaylandUpgrade libglvndUpgrade mesa-libglapiUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade mesa-libgbmUpgrade xorg-x11-server-XnestUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade libX11-xcbUpgrade libX11-commonUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libinputUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libwacom-dataUpgrade libglvnd-openglUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade libwacom-develUpgrade xorg-x11-server-commonUpgrade libdrmUpgrade mesa-vulkan-develUpgrade mesa-vulkan-driversUpgrade mesa-vdpau-driversUpgrade mesa-libEGLUpgrade libwacom | May 26, 2021 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debuginfoUpgrade libinput-develUpgrade libwacom-debugsourceUpgrade mesa-vulkan-develUpgrade mesa-libEGLUpgrade libX11-debugsourceUpgrade mesa-libGLUpgrade libwacom-dataUpgrade libdrm-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade mesa-debugsourceUpgrade libinput-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XorgUpgrade libX11-xcbUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesaUpgrade xorg-x11-server-sourceUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-driversUpgrade libX11-debuginfoUpgrade mesa-filesystemUpgrade libinputUpgrade libglvnd-eglUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libinput-debuginfoUpgrade libX11Upgrade libX11-develNo solution existsUpgrade mesa-dri-driversUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-develUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade libdrm-develUpgrade libX11-commonUpgrade libwacomUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade xorg-x11-server-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-core-develUpgrade drm-utils-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-vdpau-driversUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libgbmUpgrade libglvndUpgrade egl-waylandUpgrade libinput-test-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-glxUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-debugsourceUpgrade egl-wayland-debuginfo | May 21, 2021 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade libX11-xcbUpgrade xorg-x11-server-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-glxUpgrade libinput-debugsourceUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade libdrm-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-libGL-develUpgrade libdrm-debugsourceUpgrade libX11-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade mesa-libglapiUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-libxatrackerUpgrade libglvnd-debuginfoUpgrade libX11Upgrade libwacom-debugsourceUpgrade libinput-utilsUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libinput-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libEGLUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbmUpgrade libglvnd-debugsourceUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade mesa-libgbm-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade egl-waylandUpgrade mesa-vulkan-develUpgrade libX11-develUpgrade libinput-develUpgrade libwacomUpgrade xorg-x11-driversUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libgbm-develUpgrade libwacom-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-xcb-debuginfoUpgrade libglvnd-core-develUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinputUpgrade libglvndUpgrade mesa-dri-driversUpgrade mesa-libOSMesa-develUpgrade mesa-filesystemUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-openglUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfo | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade libxcb-xkb1-32bitUpgrade libxcb-dri3-0-32bitUpgrade libx11-xcb1-32bitUpgrade libxcb-present0Upgrade libxcb-render0-32bitUpgrade libxcb-res0-32bitUpgrade libxcb-xtest0Upgrade libx11-devel-32bitUpgrade libxcb-shape0Upgrade libxcb-randr0-32bitUpgrade libxcb-shm0-32bitUpgrade libxcb-sync1-32bitUpgrade libxcb-xinput0Upgrade libxcb-dri2-0-32bitUpgrade libxcb-xkb1Upgrade libxcb-res0Upgrade libxcb-dpms0Upgrade xorg-x11-libx11Upgrade libxcb-xf86dri0Upgrade libxcb-sync1Upgrade libxcb-xinerama0Upgrade libxcb-devel-docUpgrade libx11-develUpgrade libxcb-dri2-0Upgrade libxcb-xevie0Upgrade libxcb-xf86dri0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-xfixes0-32bitUpgrade libxcb-glx0-32bitUpgrade libxcb-xvmc0Upgrade libxcb-xvmc0-32bitUpgrade libxcb-xfixes0Upgrade libxcb-xprint0Upgrade libxcb-develUpgrade libxcb-glx0Upgrade libxcb-damage0Upgrade libxcb-composite0-32bitUpgrade libxcb-screensaver0Upgrade libxcb-shm0Upgrade libxcb-randr0Upgrade libx11-6-32bitUpgrade libx11-6Upgrade libxcb-composite0Upgrade libx11-xcb1Upgrade libxcb-xv0-32bitUpgrade libxcb-shape0-32bitUpgrade libxcb-render0Upgrade libxcb1Upgrade libxcb-xinerama0-32bitUpgrade libxcb-record0-32bitUpgrade libxcb-xv0Upgrade libxcb-damage0-32bitUpgrade libxcb-xinput0-32bitUpgrade libxcb-xtest0-32bitUpgrade libx11-dataUpgrade libxcb-dri3-0Upgrade libxcb1-32bitUpgrade libxcb-devel-32bitUpgrade libxcb-record0Upgrade libxcb-screensaver0-32bitUpgrade libxcb-dpms0-32bitUpgrade xorg-x11-libx11-32bit | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade libx11-6 (Ubuntu Pro)Upgrade libx11-6 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub