An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glesUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade libglvnd-openglUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-develUpgrade libwacom-develUpgrade libglvndUpgrade xorg-x11-driversUpgrade libinput-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade libx11 | Aug 22, 2024 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libX11-develUpgrade libX11-commonUpgrade libX11Upgrade libX11-debuginfo | Jun 24, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libglapiUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libGLUpgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade egl-wayland-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-filesystemUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-commonUpgrade libwacom-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XvfbUpgrade libglvnd-glesUpgrade libX11-xcbUpgrade libglvnd-eglUpgrade mesa-libEGL-develUpgrade libinput-debuginfoUpgrade libinput-test-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libGL-develUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libxatrackerUpgrade libdrm-debugsourceUpgrade mesa-debugsourceUpgrade mesa-libgbmUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-XnestUpgrade libX11-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade mesa-dri-drivers-debuginfoUpgrade libX11Upgrade xorg-x11-driversUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesaUpgrade drm-utils-debuginfoUpgrade libinput-utilsUpgrade mesa-vulkan-driversUpgrade libwacom-dataUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-openglUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libglvnd-core-develUpgrade libwacomUpgrade xorg-x11-server-debuginfoUpgrade mesa-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade egl-wayland-debuginfoUpgrade libdrm-develUpgrade libglvnd-glxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfo | Jun 1, 2021 | Aug 5, 2020 |
| Debian | — | Upgrade libx11 | Aug 5, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade libX11 | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Aug 28, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Nov 3, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Oct 13, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libxscrnsaver to version 1.2.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxcb to version 1.9.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libxdmcp to version 1.1.1-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxevie to version 1.0.3-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxext to version 1.3.2-0.175.3.36.0.25.1554 on Solaris 11.3Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libxau to version 1.0.8-0.175.3.36.0.25.1554 on Solaris 11.3 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade mesa-libgbm-develUpgrade xorg-x11-server-XwaylandUpgrade libglvndUpgrade mesa-libgbmUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade libglvnd-core-develUpgrade libX11-commonUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-libGLUpgrade libinput-utilsUpgrade mesa-libOSMesa-develUpgrade mesa-libglapiUpgrade libX11-xcbUpgrade libglvnd-develUpgrade libinputUpgrade libinput-develUpgrade xorg-x11-server-XnestUpgrade mesa-dri-driversUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XephyrUpgrade libX11Upgrade libglvnd-glxUpgrade mesa-vulkan-driversUpgrade libwacom-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-driversUpgrade mesa-libxatrackerUpgrade mesa-filesystemUpgrade xorg-x11-server-XorgUpgrade libwacom-dataUpgrade libglvnd-openglUpgrade libwacomUpgrade mesa-libEGLUpgrade libdrmUpgrade mesa-vulkan-develUpgrade xorg-x11-server-commonUpgrade libdrm-develUpgrade xorg-x11-server-source | May 26, 2021 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade mesa-libEGL-develUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade libwacom-dataUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XephyrUpgrade libinput-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade mesa-libEGLUpgrade libglvnd-gles-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade libwacom-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade mesa-libGLUpgrade libX11-xcbUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libinput-utils-debuginfoUpgrade libdrm-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-vdpau-driversUpgrade libX11Upgrade xorg-x11-driversUpgrade libX11-develNo solution existsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade libinput-test-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbmUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvndUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesa-develUpgrade libwacomUpgrade libglvnd-core-develUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacom-develUpgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libdrm-debuginfoUpgrade libX11-commonUpgrade libglvnd-debugsourceUpgrade libglvnd-glesUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade mesa-filesystemUpgrade xorg-x11-server-debugsourceUpgrade egl-wayland-debugsourceUpgrade libinputUpgrade libglvnd-eglUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-opengl-debuginfo | May 21, 2021 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-vulkan-develUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade libglvndUpgrade libwacomUpgrade libX11-develUpgrade libX11-xcb-debuginfoUpgrade libglvnd-openglUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesa-develUpgrade egl-waylandUpgrade libinputUpgrade libglvnd-glesUpgrade egl-wayland-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libxatracker-debuginfoUpgrade libinput-develUpgrade libwacom-develUpgrade mesa-libgbmUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrmUpgrade libglvnd-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libX11-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-filesystemUpgrade libglvnd-eglUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrm-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libX11Upgrade libinput-utilsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGLUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-libEGL-develUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade mesa-debuginfoUpgrade libinput-debugsourceUpgrade libwacom-debugsourceUpgrade libglvnd-glxUpgrade libglvnd-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-gles-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libX11-xcbUpgrade mesa-libGL-devel | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade libxcb1Upgrade libxcb-xv0Upgrade libx11-6Upgrade libx11-xcb1Upgrade libxcb-devel-32bitUpgrade libxcb-xv0-32bitUpgrade libx11-6-32bitUpgrade libxcb-record0Upgrade libxcb-dpms0-32bitUpgrade libxcb-screensaver0-32bitUpgrade libxcb-render0Upgrade libxcb-xinput0-32bitUpgrade libxcb-shape0-32bitUpgrade libxcb-xtest0-32bitUpgrade libxcb-record0-32bitUpgrade libx11-dataUpgrade libxcb-composite0Upgrade libxcb-damage0-32bitUpgrade xorg-x11-libx11-32bitUpgrade libxcb-xinerama0-32bitUpgrade libxcb-dri3-0Upgrade libxcb1-32bitUpgrade libx11-develUpgrade libxcb-xprint0Upgrade libx11-devel-32bitUpgrade xorg-x11-libx11Upgrade libxcb-shm0-32bitUpgrade libxcb-damage0Upgrade libxcb-composite0-32bitUpgrade libxcb-develUpgrade libxcb-xf86dri0Upgrade libxcb-sync1Upgrade libxcb-xinerama0Upgrade libxcb-res0Upgrade libxcb-devel-docUpgrade libxcb-xkb1Upgrade libxcb-screensaver0Upgrade libxcb-dri2-0-32bitUpgrade libxcb-present0Upgrade libxcb-dri2-0Upgrade libxcb-dri3-0-32bitUpgrade libxcb-xfixes0Upgrade libxcb-xvmc0-32bitUpgrade libxcb-xvmc0Upgrade libxcb-glx0Upgrade libxcb-sync1-32bitUpgrade libxcb-dpms0Upgrade libxcb-xfixes0-32bitUpgrade libxcb-present0-32bitUpgrade libxcb-xf86dri0-32bitUpgrade libxcb-glx0-32bitUpgrade libxcb-shm0Upgrade libxcb-randr0Upgrade libx11-xcb1-32bitUpgrade libxcb-res0-32bitUpgrade libxcb-randr0-32bitUpgrade libxcb-xevie0Upgrade libxcb-xtest0Upgrade libxcb-xkb1-32bitUpgrade libxcb-render0-32bitUpgrade libxcb-xinput0Upgrade libxcb-shape0 | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade libx11-6Upgrade libx11-6 (Ubuntu Pro) | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub