A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libx11alma-upgrade-libx11-commonalma-upgrade-libx11-develalma-upgrade-libx11-xcb | May 8, 2024 | Oct 10, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libx11 | Mar 26, 2024 | Oct 10, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libx11amazon-linux-ami-2-upgrade-libx11-commonamazon-linux-ami-2-upgrade-libx11-debuginfoamazon-linux-ami-2-upgrade-libx11-develamazon-linux-ami-2-upgrade-libxpmamazon-linux-ami-2-upgrade-libxpm-debuginfoamazon-linux-ami-2-upgrade-libxpm-devel | Oct 23, 2023 | Oct 10, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libx11amazon-linux-upgrade-libxpm | Oct 25, 2023 | Oct 10, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libx11amazon-linux-2023-upgrade-libx11-commonamazon-linux-2023-upgrade-libx11-debuginfoamazon-linux-2023-upgrade-libx11-debugsourceamazon-linux-2023-upgrade-libx11-develamazon-linux-2023-upgrade-libx11-xcbamazon-linux-2023-upgrade-libx11-xcb-debuginfoamazon-linux-2023-upgrade-libxpmamazon-linux-2023-upgrade-libxpm-debuginfoamazon-linux-2023-upgrade-libxpm-debugsourceamazon-linux-2023-upgrade-libxpm-develamazon-linux-2023-upgrade-libxpm-devel-debuginfo | Feb 17, 2025 | Oct 4, 2023 | |
| Debian | debian-upgrade-libx11 | Oct 6, 2023 | Oct 6, 2023 | |
| Freebsd | freebsd-upgrade-package-libx11 | Oct 12, 2023 | Oct 12, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-libx11 | Jul 9, 2024 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxpm | Jan 10, 2024 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libx11 | Jan 10, 2024 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libx11huawei-euleros-2_0_sp5-upgrade-libx11-commonhuawei-euleros-2_0_sp5-upgrade-libx11-devel | Feb 12, 2024 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxpmhuawei-euleros-2_0_sp8-upgrade-libxpm-devel | Mar 13, 2024 | Oct 10, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxpm | Jan 10, 2024 | Oct 10, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libx11oracle-linux-upgrade-libx11-commonoracle-linux-upgrade-libx11-develoracle-linux-upgrade-libx11-xcb | May 28, 2024 | Oct 4, 2023 |
| Redhat_linux | redhat-upgrade-libx11redhat-upgrade-libx11-commonredhat-upgrade-libx11-debuginforedhat-upgrade-libx11-debugsourceredhat-upgrade-libx11-develredhat-upgrade-libx11-xcbredhat-upgrade-libx11-xcb-debuginfo | May 1, 2024 | Oct 10, 2023 | |
| Rocky_linux | rocky-upgrade-libx11rocky-upgrade-libx11-debuginforocky-upgrade-libx11-debugsourcerocky-upgrade-libx11-develrocky-upgrade-libx11-xcbrocky-upgrade-libx11-xcb-debuginfo | May 8, 2025 | Oct 10, 2023 | |
| Suse | — | suse-upgrade-libx11-6suse-upgrade-libx11-6-32bitsuse-upgrade-libx11-datasuse-upgrade-libx11-develsuse-upgrade-libx11-devel-32bitsuse-upgrade-libx11-xcb1suse-upgrade-libx11-xcb1-32bit | Oct 5, 2023 | Oct 4, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libx11-6ubuntu-pro-upgrade-libxpm4ubuntu-upgrade-libx11-6ubuntu-upgrade-libxpm4 | Oct 4, 2023 | Oct 3, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub