An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libinput-develUpgrade libglvndUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade libglvnd-eglUpgrade mesa-libOSMesa-develUpgrade libglvnd-glxUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade libwacom-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade libx11 | Aug 22, 2024 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libX11Upgrade libX11-debuginfoUpgrade libX11-commonUpgrade libX11-devel | Jun 24, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLUpgrade libwacom-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libGL-develUpgrade libX11-commonUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-xcbUpgrade libX11-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libxatrackerUpgrade libglvnd-eglUpgrade libinput-debuginfoUpgrade libdrm-debugsourceUpgrade libglvnd-glesUpgrade xorg-x11-server-XdmxUpgrade mesa-filesystemUpgrade mesa-libglapiUpgrade libX11-develUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade egl-wayland-debugsourceUpgrade libdrm-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade mesa-debuginfoUpgrade libdrmUpgrade egl-wayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-vdpau-driversUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11Upgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade mesa-dri-driversUpgrade libglvnd-core-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libglvndUpgrade libwacomUpgrade mesa-vulkan-develUpgrade drm-utils-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacom-dataUpgrade libinput-utilsUpgrade libglvnd-glxUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsource | Jun 1, 2021 | Aug 5, 2020 |
| Debian | — | Upgrade libx11 | Aug 5, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade libX11 | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Aug 28, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 3, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Oct 13, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade libglvndUpgrade egl-waylandUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade libinput-develUpgrade mesa-libgbmUpgrade libX11-commonUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-libglapiUpgrade mesa-libOSMesa-develUpgrade libX11-xcbUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-dri-driversUpgrade libglvnd-develUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade libinput-utilsUpgrade xorg-x11-server-XwaylandUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade libdrm-develUpgrade xorg-x11-driversUpgrade libdrmUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade libwacom-develUpgrade xorg-x11-server-XorgUpgrade mesa-filesystemUpgrade mesa-vdpau-driversUpgrade mesa-libxatrackerUpgrade libglvnd-openglUpgrade mesa-libOSMesaUpgrade mesa-libEGLUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade xorg-x11-server-XephyrUpgrade libwacom-dataUpgrade libwacom | May 26, 2021 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade mesa-libOSMesaUpgrade libinput-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade mesa-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libinput-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-XnestUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade libX11-debugsourceUpgrade mesa-vulkan-develUpgrade libglvnd-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-libGLUpgrade libX11-xcbUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-utils-debuginfoUpgrade mesa-vdpau-driversUpgrade libglvnd-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libGL-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrm-develNo solution existsUpgrade libwacomUpgrade mesa-libxatracker-debuginfoUpgrade libinputUpgrade mesa-libOSMesa-develUpgrade libdrm-debuginfoUpgrade libX11-commonUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-glesUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-core-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade mesa-libGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-develUpgrade mesa-dri-driversUpgrade libX11Upgrade mesa-libgbmUpgrade egl-wayland-debuginfoUpgrade libX11-debuginfoUpgrade libwacom-develUpgrade libinput-test-debuginfoUpgrade xorg-x11-driversUpgrade libinput-debuginfoUpgrade mesa-filesystemUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade libglvnd-eglUpgrade libdrmUpgrade libinput-utilsUpgrade mesa-libgbm-develUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfo | May 21, 2021 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-glesUpgrade libglvndUpgrade libglvnd-core-develUpgrade libglvnd-opengl-debuginfoUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade libX11-develUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade libinput-develUpgrade libwacomUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade libglvnd-debugsourceUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade libglvnd-eglUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade libglvnd-egl-debuginfoUpgrade libX11-debuginfoUpgrade libinputUpgrade libwacom-develUpgrade egl-wayland-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbmUpgrade mesa-libgbm-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libGLUpgrade xorg-x11-server-XdmxUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debugsourceUpgrade libdrm-debugsourceUpgrade libX11-xcbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade libdrm-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libEGLUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-glxUpgrade mesa-libOSMesaUpgrade mesa-libEGL-develUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libglapiUpgrade mesa-debuginfoUpgrade mesa-libxatrackerUpgrade libinput-debugsourceUpgrade libX11Upgrade libinput-utilsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-common | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade libxcb-xtest0Upgrade libxcb-dri2-0Upgrade libx11-devel-32bitUpgrade libxcb-xinput0Upgrade libxcb-develUpgrade libxcb-sync1-32bitUpgrade libxcb-xprint0Upgrade libxcb-xkb1Upgrade libxcb-res0-32bitUpgrade libxcb-present0Upgrade libxcb-shape0Upgrade libxcb-randr0-32bitUpgrade libxcb-screensaver0Upgrade xorg-x11-libx11Upgrade libxcb-composite0-32bitUpgrade libxcb-damage0Upgrade libxcb-shm0-32bitUpgrade libxcb-xkb1-32bitUpgrade libx11-xcb1-32bitUpgrade libxcb-dri3-0-32bitUpgrade libxcb-render0-32bitUpgrade libxcb-xvmc0Upgrade libxcb-sync1Upgrade libxcb-xevie0Upgrade libx11-develUpgrade libxcb-xf86dri0Upgrade libxcb-glx0Upgrade libxcb-glx0-32bitUpgrade libxcb-devel-docUpgrade libxcb-xfixes0Upgrade libxcb-dpms0Upgrade libxcb-randr0Upgrade libxcb-xinerama0Upgrade libxcb-xf86dri0-32bitUpgrade libxcb-shm0Upgrade libxcb-xfixes0-32bitUpgrade libxcb-xvmc0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-dri2-0-32bitUpgrade libxcb-res0Upgrade libxcb-damage0-32bitUpgrade libxcb1-32bitUpgrade libxcb-shape0-32bitUpgrade libxcb-xtest0-32bitUpgrade libx11-dataUpgrade libxcb-record0-32bitUpgrade libxcb-devel-32bitUpgrade libxcb-record0Upgrade libxcb-xv0Upgrade libxcb-screensaver0-32bitUpgrade libxcb-dpms0-32bitUpgrade libxcb-xv0-32bitUpgrade libxcb-render0Upgrade libx11-6Upgrade libxcb-composite0Upgrade xorg-x11-libx11-32bitUpgrade libx11-xcb1Upgrade libx11-6-32bitUpgrade libxcb-xinput0-32bitUpgrade libxcb-dri3-0Upgrade libxcb-xinerama0-32bitUpgrade libxcb1 | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade libx11-6 (Ubuntu Pro)Upgrade libx11-6 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub