An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvndUpgrade xorg-x11-driversUpgrade libinput-develUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade mesa-libOSMesa-develUpgrade libwacom-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade libx11 | Aug 22, 2024 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libX11-debuginfoUpgrade libX11Upgrade libX11-develUpgrade libX11-common | Jun 24, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade libX11-xcbUpgrade mesa-libxatrackerUpgrade mesa-libEGLUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade egl-wayland-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-commonUpgrade libinput-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade libX11-debugsourceUpgrade libX11-debuginfoUpgrade libglvnd-eglUpgrade mesa-debugsourceUpgrade mesa-libGL-develUpgrade libglvnd-egl-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade libX11-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade mesa-libglapiUpgrade mesa-libOSMesa-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libinput-utilsUpgrade libglvnd-glxUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade xorg-x11-driversUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesaUpgrade mesa-dri-driversUpgrade egl-wayland-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libdrm-develUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-develUpgrade libglvndUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-openglUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacomUpgrade libglvnd-core-develUpgrade xorg-x11-server-XorgUpgrade egl-waylandUpgrade mesa-vulkan-driversUpgrade libwacom-data | Jun 1, 2021 | Aug 5, 2020 |
| Debian | — | Upgrade libx11 | Aug 5, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade libX11 | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Aug 28, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 3, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Oct 13, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade mesa-libGL-develUpgrade libinputUpgrade egl-waylandUpgrade libglvndUpgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-dri-driversUpgrade libinput-develUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade libinput-utilsUpgrade mesa-libgbmUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libX11-develUpgrade mesa-libglapiUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade xorg-x11-server-XdmxUpgrade libdrm-develUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGLUpgrade xorg-x11-driversUpgrade libwacom-develUpgrade mesa-filesystemUpgrade libwacomUpgrade mesa-vdpau-driversUpgrade libglvnd-glxUpgrade xorg-x11-server-sourceUpgrade mesa-vulkan-develUpgrade libdrmUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-driversUpgrade mesa-libxatrackerUpgrade libwacom-dataUpgrade xorg-x11-server-XorgUpgrade libglvnd-openglUpgrade xorg-x11-server-XvfbUpgrade mesa-libOSMesaUpgrade libX11 | May 26, 2021 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade libglvnd-openglUpgrade libglvnd-eglUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libX11-develUpgrade libX11-commonUpgrade drm-utils-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libgbmUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libinput-utilsUpgrade mesa-filesystemUpgrade libdrmUpgrade egl-wayland-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-debuginfoUpgrade libdrm-develUpgrade libinputUpgrade egl-waylandUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvndUpgrade libwacom-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-driversUpgrade egl-wayland-debugsourceUpgrade libdrm-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libwacomUpgrade libinput-debuginfoUpgrade libglvnd-glxUpgrade mesa-vdpau-driversUpgrade libglvnd-opengl-debuginfoNo solution existsUpgrade libX11Upgrade libglvnd-glesUpgrade mesa-dri-driversUpgrade libinput-test-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libdrm-debugsourceUpgrade libinput-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XorgUpgrade libinput-develUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade libwacom-dataUpgrade libglvnd-egl-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade mesa-libGLUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL | May 21, 2021 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-libGL-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XorgUpgrade libX11-xcbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrm-debugsourceUpgrade libX11-debugsourceUpgrade libglvnd-glxUpgrade libwacom-debugsourceUpgrade mesa-libGLUpgrade libinput-utilsUpgrade libX11Upgrade mesa-dri-drivers-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-commonUpgrade libdrm-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libOSMesaUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-gles-debuginfoUpgrade libinput-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libEGLUpgrade mesa-libxatrackerUpgrade mesa-libglapi-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libglapiUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvndUpgrade libX11-xcb-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libOSMesa-develUpgrade libglvnd-eglUpgrade libdrmUpgrade egl-wayland-debugsourceUpgrade libglvnd-develUpgrade mesa-vdpau-driversUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-openglUpgrade mesa-libgbmUpgrade mesa-dri-driversUpgrade libglvnd-glesUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade libX11-debuginfoUpgrade mesa-vulkan-driversUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade libX11-develUpgrade libwacomUpgrade libinput-develUpgrade xorg-x11-driversUpgrade libdrm-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade libwacom-develUpgrade libinputUpgrade mesa-vulkan-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libgbm-devel | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade libxcb-dri3-0-32bitUpgrade libxcb-render0-32bitUpgrade libxcb-xkb1-32bitUpgrade libxcb-dri2-0Upgrade libxcb-present0Upgrade libxcb-present0-32bitUpgrade libxcb-randr0-32bitUpgrade libxcb-xfixes0Upgrade libxcb-dri2-0-32bitUpgrade libx11-xcb1-32bitUpgrade libxcb-xtest0Upgrade libxcb-randr0Upgrade libxcb-sync1Upgrade libxcb-xevie0Upgrade libxcb-devel-docUpgrade libxcb-shape0Upgrade libxcb-sync1-32bitUpgrade libxcb-xvmc0Upgrade libxcb-glx0Upgrade libxcb-dpms0Upgrade libxcb-xfixes0-32bitUpgrade libx11-devel-32bitUpgrade libxcb-glx0-32bitUpgrade libxcb-res0Upgrade libxcb-shm0-32bitUpgrade libxcb-screensaver0Upgrade libxcb-damage0Upgrade libxcb-xprint0Upgrade libxcb-composite0-32bitUpgrade libxcb-shm0Upgrade libxcb-develUpgrade libxcb-xkb1Upgrade libxcb-res0-32bitUpgrade xorg-x11-libx11Upgrade libxcb-xvmc0-32bitUpgrade libxcb-xf86dri0-32bitUpgrade libxcb-xinerama0Upgrade libxcb-xinput0Upgrade libxcb-xf86dri0Upgrade libx11-develUpgrade libxcb-xinput0-32bitUpgrade libxcb-dri3-0Upgrade libxcb-render0Upgrade libx11-6-32bitUpgrade libxcb-shape0-32bitUpgrade libx11-6Upgrade libx11-xcb1Upgrade libxcb-xv0-32bitUpgrade libxcb-devel-32bitUpgrade libxcb-record0Upgrade libxcb-xv0Upgrade libxcb1-32bitUpgrade libxcb-composite0Upgrade libxcb-damage0-32bitUpgrade xorg-x11-libx11-32bitUpgrade libxcb-screensaver0-32bitUpgrade libxcb-dpms0-32bitUpgrade libxcb-xtest0-32bitUpgrade libx11-dataUpgrade libxcb-record0-32bitUpgrade libxcb1Upgrade libxcb-xinerama0-32bit | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade libx11-6 (Ubuntu Pro)Upgrade libx11-6 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub