A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libX11Upgrade libX11-xcbUpgrade libX11-commonUpgrade libX11-devel | May 8, 2024 | Oct 10, 2023 |
| Alpine Linux | — | Upgrade libx11 | Mar 26, 2024 | Oct 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libX11-commonUpgrade libX11Upgrade libX11-develUpgrade libXpmUpgrade libX11-debuginfoUpgrade libXpm-debuginfoUpgrade libXpm-devel | Oct 23, 2023 | Oct 10, 2023 |
| Amazon_linux | — | Upgrade libXpmUpgrade libX11 | Oct 25, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | — | Upgrade libXpm-debugsourceUpgrade libX11Upgrade libX11-commonUpgrade libXpmUpgrade libX11-xcb-debuginfoUpgrade libXpm-devel-debuginfoUpgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libX11-debugsourceUpgrade libX11-develUpgrade libX11-xcbUpgrade libX11-debuginfo | Feb 17, 2025 | Oct 4, 2023 |
| Debian | — | Upgrade libx11 | Oct 6, 2023 | Oct 6, 2023 |
| Freebsd | — | Upgrade libX11 | Oct 12, 2023 | Oct 12, 2023 |
| Gentoo Linux | — | Upgrade x11-libs/libX11. | Jul 9, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 12, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Mar 13, 2024 | Oct 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Jan 10, 2024 | Oct 10, 2023 |
| Oracle_linux | — | Upgrade libX11Upgrade libX11-develUpgrade libX11-commonUpgrade libX11-xcb | May 28, 2024 | Oct 4, 2023 |
| Redhat_linux | — | Upgrade libX11-xcb-debuginfoNo solution existsUpgrade libX11-commonUpgrade libX11-develUpgrade libX11Upgrade libX11-debugsourceUpgrade libX11-debuginfoUpgrade libX11-xcb | May 1, 2024 | Oct 10, 2023 |
| Rocky_linux | — | Upgrade libX11-xcbUpgrade libX11-debugsourceUpgrade libX11-develUpgrade libX11Upgrade libX11-xcb-debuginfoUpgrade libX11-debuginfo | May 8, 2025 | Oct 10, 2023 |
| Suse | — | Upgrade libx11-xcb1-32bitUpgrade libx11-xcb1Upgrade libx11-6Upgrade libx11-develUpgrade libx11-6-32bitUpgrade libx11-dataUpgrade libx11-devel-32bit | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | — | Upgrade libx11-6 (Ubuntu Pro)Upgrade libxpm4 (Ubuntu Pro)Upgrade libxpm4Upgrade libx11-6 | Oct 4, 2023 | Oct 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub