Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-43787HistoryOct 10, 2023 - 1:15 p.m.
CVE-2023-43787
2023-10-1013:15:22
Alpine Linux Development Team
security.alpinelinux.org
73
vulnerability
libx11
integer overflow
xcreateimage
local user
arbitrary code
elevated privileges
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
Related
debiancve
debiancve
CVE-2023-43787
2023-10-10 13:15:22
nvd
nvd
CVE-2023-43787
2023-10-10 13:15:22
cbl_mariner
cbl_mariner
CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
redhatcve
redhatcve
CVE-2023-43787
2023-10-05 07:55:11
cve
cve
CVE-2023-43787
2023-10-10 13:15:22
prion
prion
Integer overflow
2023-10-10 13:15:00
ubuntucve
ubuntucve
CVE-2023-43787
2023-10-03 00:00:00
veracode
veracode
Integer Overflow
2023-10-12 07:01:18
cvelist
cvelist
openvas
openvas
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1457)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1340)
2024-03-13 00:00:00
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1318)
2024-03-13 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : libXpm (EulerOS-SA-2024-1180)
2024-02-08 00:00:00
EulerOS Virtualization 2.9.1 : libXpm (EulerOS-SA-2024-1457)
2024-03-21 00:00:00
EulerOS 2.0 SP10 : libXpm (EulerOS-SA-2024-1318)
2024-03-12 00:00:00
amazon
amazon
osv
osv
CVE-2023-43787
2023-10-10 13:15:22
libx11 vulnerabilities
2023-10-03 16:57:57
Moderate: libX11 security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2145) Moderate: libX11 security update
2024-04-30 06:14:52
(RHSA-2024:2973) Moderate: libX11 security update
2024-05-22 06:35:14
freebsd
freebsd
11/libX11 multiple vulnerabilities
2023-09-22 00:00:00
oraclelinux
oraclelinux
libX11 security update
2024-05-02 00:00:00
libX11 security update
2024-05-23 00:00:00
almalinux
almalinux
Moderate: libX11 security update
2024-04-30 00:00:00
Moderate: libX11 security update
2024-05-22 00:00:00
cloudfoundry
cloudfoundry
USN-6407-2: libx11 vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
USN-6407-1: libx11 vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
USN-6408-1: libXpm vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
redos
redos
ROS-20231018-04
2023-10-18 00:00:00
debian
debian
[SECURITY] [DSA 5517-1] libx11 security update
2023-10-05 18:18:00
[SECURITY] [DLA 3602-1] libx11 security update
2023-10-05 10:39:13
[SECURITY] [DLA 3603-1] libxpm security update
2023-10-05 11:09:57
ubuntu
ubuntu
libx11 vulnerabilities
2023-10-03 00:00:00
libx11 vulnerabilities
2023-10-10 00:00:00
libXpm vulnerabilities
2023-10-23 00:00:00
slackware
slackware
[slackware-security] libX11
2023-10-03 22:25:17
mageia
mageia
Updated libX11 packages fix security vulnerabilities
2023-10-14 01:56:51
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0486
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0112
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0668
2023-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libX11-1.8.7-1.fc39
2023-10-07 03:24:34
ibm
ibm
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-02-02 14:30:02
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for ALPINE:CVE-2023-43787