vulnerability
Red Hat: CVE-2016-10164: Moderate: X.org X11 libraries security, bug fix and enhancement update (RHSA-2017:1865)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 2017-01-26 | 2017-08-05 | 2021-03-03 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2017-01-26
Added
2017-08-05
Modified
2021-03-03
Description
Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.
Solution(s)
redhat-upgrade-drm-utilsredhat-upgrade-libdrmredhat-upgrade-libdrm-debuginforedhat-upgrade-libdrm-develredhat-upgrade-libepoxyredhat-upgrade-libepoxy-debuginforedhat-upgrade-libepoxy-develredhat-upgrade-libevdevredhat-upgrade-libevdev-debuginforedhat-upgrade-libevdev-develredhat-upgrade-libevdev-utilsredhat-upgrade-libfontencredhat-upgrade-libfontenc-debuginforedhat-upgrade-libfontenc-develredhat-upgrade-libiceredhat-upgrade-libice-debuginforedhat-upgrade-libice-develredhat-upgrade-libinputredhat-upgrade-libinput-debuginforedhat-upgrade-libinput-develredhat-upgrade-libvdpauredhat-upgrade-libvdpau-debuginforedhat-upgrade-libvdpau-develredhat-upgrade-libvdpau-docsredhat-upgrade-libwacomredhat-upgrade-libwacom-dataredhat-upgrade-libwacom-debuginforedhat-upgrade-libwacom-develredhat-upgrade-libx11redhat-upgrade-libx11-commonredhat-upgrade-libx11-debuginforedhat-upgrade-libx11-develredhat-upgrade-libxawredhat-upgrade-libxaw-debuginforedhat-upgrade-libxaw-develredhat-upgrade-libxcbredhat-upgrade-libxcb-debuginforedhat-upgrade-libxcb-develredhat-upgrade-libxcb-docredhat-upgrade-libxcursorredhat-upgrade-libxcursor-debuginforedhat-upgrade-libxcursor-develredhat-upgrade-libxdmcpredhat-upgrade-libxdmcp-debuginforedhat-upgrade-libxdmcp-develredhat-upgrade-libxfixesredhat-upgrade-libxfixes-debuginforedhat-upgrade-libxfixes-develredhat-upgrade-libxfontredhat-upgrade-libxfont-debuginforedhat-upgrade-libxfont-develredhat-upgrade-libxfont2redhat-upgrade-libxfont2-debuginforedhat-upgrade-libxfont2-develredhat-upgrade-libxiredhat-upgrade-libxi-debuginforedhat-upgrade-libxi-develredhat-upgrade-libxkbcommonredhat-upgrade-libxkbcommon-debuginforedhat-upgrade-libxkbcommon-develredhat-upgrade-libxkbcommon-x11redhat-upgrade-libxkbcommon-x11-develredhat-upgrade-libxkbfileredhat-upgrade-libxkbfile-debuginforedhat-upgrade-libxkbfile-develredhat-upgrade-libxpmredhat-upgrade-libxpm-debuginforedhat-upgrade-libxpm-develredhat-upgrade-libxrandrredhat-upgrade-libxrandr-debuginforedhat-upgrade-libxrandr-develredhat-upgrade-libxrenderredhat-upgrade-libxrender-debuginforedhat-upgrade-libxrender-develredhat-upgrade-libxtredhat-upgrade-libxt-debuginforedhat-upgrade-libxt-develredhat-upgrade-libxtstredhat-upgrade-libxtst-debuginforedhat-upgrade-libxtst-develredhat-upgrade-libxvredhat-upgrade-libxv-debuginforedhat-upgrade-libxv-develredhat-upgrade-libxvmcredhat-upgrade-libxvmc-debuginforedhat-upgrade-libxvmc-develredhat-upgrade-libxxf86vmredhat-upgrade-libxxf86vm-debuginforedhat-upgrade-libxxf86vm-develredhat-upgrade-mesa-debuginforedhat-upgrade-mesa-dri-driversredhat-upgrade-mesa-filesystemredhat-upgrade-mesa-libeglredhat-upgrade-mesa-libegl-develredhat-upgrade-mesa-libgbmredhat-upgrade-mesa-libgbm-develredhat-upgrade-mesa-libglredhat-upgrade-mesa-libgl-develredhat-upgrade-mesa-libglapiredhat-upgrade-mesa-libglesredhat-upgrade-mesa-libgles-develredhat-upgrade-mesa-libosmesaredhat-upgrade-mesa-libosmesa-develredhat-upgrade-mesa-libxatrackerredhat-upgrade-mesa-libxatracker-develredhat-upgrade-mesa-private-llvmredhat-upgrade-mesa-private-llvm-debuginforedhat-upgrade-mesa-private-llvm-develredhat-upgrade-mesa-vulkan-driversredhat-upgrade-vulkanredhat-upgrade-vulkan-debuginforedhat-upgrade-vulkan-develredhat-upgrade-vulkan-filesystemredhat-upgrade-xcb-protoredhat-upgrade-xkeyboard-configredhat-upgrade-xkeyboard-config-develredhat-upgrade-xorg-x11-proto-devel

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.