Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-43787HistoryOct 10, 2023 - 1:15 p.m.
CVE-2023-43787
2023-10-1013:15:22
Alpine Linux Development Team
security.alpinelinux.org
74
vulnerability
libx11
integer overflow
xcreateimage
local user
arbitrary code
elevated privileges
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | libx11 | < 1.8.7-r0 | UNKNOWN |
Related
ubuntucve
ubuntucve
CVE-2023-43787
2023-10-03 00:00:00
prion
prion
Integer overflow
2023-10-10 13:15:00
veracode
veracode
Integer Overflow
2023-10-12 07:01:18
cvelist
cvelist
cve
cve
CVE-2023-43787
2023-10-10 13:15:22
redhatcve
redhatcve
CVE-2023-43787
2023-10-05 07:55:11
cbl_mariner
cbl_mariner
CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
debiancve
debiancve
CVE-2023-43787
2023-10-10 13:15:22
nvd
nvd
CVE-2023-43787
2023-10-10 13:15:22
nessus
nessus
EulerOS Virtualization 2.10.1 : libXpm (EulerOS-SA-2024-1549)
2024-04-19 00:00:00
Amazon Linux 2 : libX11 (ALAS-2023-2296)
2023-10-20 00:00:00
EulerOS Virtualization 2.9.0 : libXpm (EulerOS-SA-2024-1472)
2024-03-21 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1180)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1200)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for libXpm (EulerOS-SA-2024-1472)
2024-03-21 00:00:00
osv
osv
CVE-2023-43787
2023-10-10 13:15:22
libx11 vulnerabilities
2023-10-10 14:35:08
libx11 - security update
2023-10-05 00:00:00
amazon
amazon
ubuntu
ubuntu
libx11 vulnerabilities
2023-10-10 00:00:00
libx11 vulnerabilities
2023-10-03 00:00:00
libXpm vulnerabilities
2023-10-03 00:00:00
almalinux
almalinux
Moderate: libX11 security update
2024-05-22 00:00:00
Moderate: libX11 security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2973) Moderate: libX11 security update
2024-05-22 06:35:14
(RHSA-2024:2145) Moderate: libX11 security update
2024-04-30 06:14:52
slackware
slackware
[slackware-security] libX11
2023-10-03 22:25:17
mageia
mageia
Updated libX11 packages fix security vulnerabilities
2023-10-14 01:56:51
cloudfoundry
cloudfoundry
USN-6407-1: libx11 vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
USN-6407-2: libx11 vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
USN-6408-1: libXpm vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
debian
debian
[SECURITY] [DLA 3602-1] libx11 security update
2023-10-05 10:39:13
[SECURITY] [DSA 5517-1] libx11 security update
2023-10-05 18:18:00
[SECURITY] [DLA 3603-1] libxpm security update
2023-10-05 11:09:57
oraclelinux
oraclelinux
libX11 security update
2024-05-23 00:00:00
libX11 security update
2024-05-02 00:00:00
redos
redos
ROS-20231018-04
2023-10-18 00:00:00
freebsd
freebsd
11/libX11 multiple vulnerabilities
2023-09-22 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0112
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0486
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0668
2023-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libX11-1.8.7-1.fc39
2023-10-07 03:24:34
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for ALPINE:CVE-2023-43787