LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libX11-xcbUpgrade libX11-develUpgrade libX11-commonUpgrade libX11 | May 4, 2022 | May 27, 2021 |
| Alpine Linux | — | Upgrade libx11 | Mar 26, 2024 | May 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libX11Upgrade libX11-develUpgrade libX11-debuginfoUpgrade libX11-common | Jul 19, 2021 | May 27, 2021 |
| Amazon_linux | — | Upgrade libX11 | Jul 13, 2021 | May 25, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 27, 2021 |
| Centos_linux | — | Upgrade libX11-debugsourceUpgrade libX11-xcbUpgrade libX11Upgrade libX11-develUpgrade libX11-debuginfoUpgrade libX11-commonUpgrade libX11-xcb-debuginfo | Aug 31, 2021 | May 27, 2021 |
| Debian | — | Upgrade libx11 | May 25, 2021 | May 25, 2021 |
| Freebsd | — | Upgrade libX11 | Nov 4, 2022 | Jun 1, 2021 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | May 28, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 29, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Sep 24, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp9 | — | — | Sep 29, 2021 | May 27, 2021 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.7.2-11.4.36.0.1.101.0 on Solaris 11.4 | Aug 27, 2021 | May 27, 2021 |
| Oracle_linux | — | Upgrade libX11Upgrade libX11-commonUpgrade libX11-develUpgrade libX11-xcb | Aug 31, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade libX11-commonUpgrade libX11Upgrade libX11-xcb-debuginfoUpgrade libX11-xcbUpgrade libX11-debuginfoNo solution existsUpgrade libX11-develUpgrade libX11-debugsource | Aug 31, 2021 | May 27, 2021 |
| Rocky_linux | — | Upgrade libX11Upgrade libX11-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libX11-develUpgrade libX11-xcbUpgrade libX11-debugsource | Mar 12, 2024 | May 27, 2021 |
| Suse | — | Upgrade libx11-xcb1Upgrade xorg-x11-libx11Upgrade libx11-dataUpgrade libx11-6-32bitUpgrade libx11-6Upgrade libx11-devel-32bitUpgrade libx11-xcb1-32bitUpgrade libx11-develUpgrade xorg-x11-libx11-32bit | May 27, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libx11-6 (Ubuntu Pro)Upgrade libx11-6 | May 26, 2021 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub