Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2018-3102-1.NASL
HistoryOct 12, 2018 - 12:00 a.m.

SUSE SLED12 / SLES12 Security Update : libX11 / libxcb (SUSE-SU-2018:3102-1)

2018-10-1200:00:00
This script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
67
JSON

This update for libX11 and libxcb fixes the following issue :

libX11 :

These security issues were fixed :

CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062).

CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068).

CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2018:3102-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(118080);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/02/08");

  script_cve_id("CVE-2018-14598", "CVE-2018-14599", "CVE-2018-14600");

  script_name(english:"SUSE SLED12 / SLES12 Security Update : libX11 / libxcb (SUSE-SU-2018:3102-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis",
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description",
    value:
"This update for libX11 and libxcb fixes the following issue :

libX11 :

These security issues were fixed :

CVE-2018-14599: The function XListExtensions was vulnerable to an
off-by-one error caused by malicious server responses, leading to DoS
or possibly unspecified other impact (bsc#1102062).

CVE-2018-14600: The function XListExtensions interpreted a variable as
signed instead of unsigned, resulting in an out-of-bounds write (of up
to 128 bytes), leading to DoS or remote code execution (bsc#1102068).

CVE-2018-14598: A malicious server could have sent a reply in which
the first string overflows, causing a variable to be set to NULL that
will be freed later on, leading to DoS (segmentation fault)
(bsc#1102073).

The update package also includes non-security fixes. See advisory for
details.

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1094327"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1102062"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1102068"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1102073"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-14598/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-14599/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-14600/"
  );
  # https://www.suse.com/support/update/announcement/2018/suse-su-20183102-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?3e8a1df1"
  );
  script_set_attribute(
    attribute:"solution",
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Software Development Kit 12-SP3:zypper in -t
patch SUSE-SLE-SDK-12-SP3-2018-2202=1

SUSE Linux Enterprise Server 12-SP3:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-2018-2202=1

SUSE Linux Enterprise Desktop 12-SP3:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP3-2018-2202=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-14600");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11-6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11-6-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11-xcb1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libX11-xcb1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri2-0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri2-0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri3-0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-dri3-0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-glx0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-glx0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-present0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-present0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-randr0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-randr0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-render0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-render0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-shape0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-shape0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-shm0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-shm0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-sync1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-sync1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xf86dri0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xf86dri0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xfixes0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xfixes0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xinerama0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xinerama0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xkb1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xkb1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xv0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb-xv0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libxcb1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/08/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/10/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/10/12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(3)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP3", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(3)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP3", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-6-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-6-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-6-debuginfo-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-6-debuginfo-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-debugsource-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-xcb1-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-xcb1-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-xcb1-debuginfo-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libX11-xcb1-debuginfo-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-debugsource-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri2-0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri2-0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri2-0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri2-0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri3-0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri3-0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri3-0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-dri3-0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-glx0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-glx0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-glx0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-glx0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-present0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-present0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-present0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-present0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-randr0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-randr0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-render0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-render0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-render0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-render0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shape0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shape0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shm0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shm0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shm0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-shm0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-sync1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-sync1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-sync1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-sync1-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xf86dri0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xf86dri0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xfixes0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xfixes0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xfixes0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xfixes0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xinerama0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xinerama0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xkb1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xkb1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xkb1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xkb1-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xv0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb-xv0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libxcb1-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-6-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-6-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-6-debuginfo-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-6-debuginfo-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-debugsource-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-xcb1-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-xcb1-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-xcb1-debuginfo-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libX11-xcb1-debuginfo-32bit-1.6.2-12.5.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-debugsource-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri2-0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri2-0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri2-0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri2-0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri3-0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri3-0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri3-0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-dri3-0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-glx0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-glx0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-glx0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-glx0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-present0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-present0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-present0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-present0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-randr0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-randr0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-render0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-render0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-render0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-render0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shape0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shape0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shm0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shm0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shm0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-shm0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-sync1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-sync1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-sync1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-sync1-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xf86dri0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xf86dri0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xfixes0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xfixes0-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xfixes0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xfixes0-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xinerama0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xinerama0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xkb1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xkb1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xkb1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xkb1-debuginfo-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xv0-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb-xv0-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb1-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb1-32bit-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb1-debuginfo-1.10-4.3.1")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libxcb1-debuginfo-32bit-1.10-4.3.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libX11 / libxcb");
}
VendorProductVersionCPE
novellsuse_linuxlibx11p-cpe:/a:novell:suse_linux:libx11
novellsuse_linuxlibx11-6p-cpe:/a:novell:suse_linux:libx11-6
novellsuse_linuxlibx11-6-debuginfop-cpe:/a:novell:suse_linux:libx11-6-debuginfo
novellsuse_linuxlibx11-debugsourcep-cpe:/a:novell:suse_linux:libx11-debugsource
novellsuse_linuxlibx11-xcb1p-cpe:/a:novell:suse_linux:libx11-xcb1
novellsuse_linuxlibx11-xcb1-debuginfop-cpe:/a:novell:suse_linux:libx11-xcb1-debuginfo
novellsuse_linuxlibxcb-debugsourcep-cpe:/a:novell:suse_linux:libxcb-debugsource
novellsuse_linuxlibxcb-dri2p-cpe:/a:novell:suse_linux:libxcb-dri2
novellsuse_linuxlibxcb-dri2-0p-cpe:/a:novell:suse_linux:libxcb-dri2-0
novellsuse_linuxlibxcb-dri2-0-debuginfop-cpe:/a:novell:suse_linux:libxcb-dri2-0-debuginfo
Rows per page:
1-10 of 401

Related

nessus 33
openvas 19
mageia 1
freebsd 1
slackware 1
ibm 4
gentoo 1
suse 2
osv 4
debian 1
amazon 2
fedora 1
ubuntu 2
cloudfoundry 1
alpinelinux 3
redhatcve 3
cve 3
cvelist 3
ubuntucve 3
debiancve 3
prion 3
veracode 3
github 1
redhat 1
centos 1
oraclelinux 1
nessus
nessus
Slackware 14.0 / 14.1 / 14.2 / current : libX11 (SSA:2018-233-01)
2018-08-22 00:00:00
openSUSE Security Update : libX11 (openSUSE-2019-750)
2019-03-27 00:00:00
SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2018:2934-1)
2018-10-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:2955-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-1482-1)
2018-09-02 00:00:00
Slackware: Security Advisory (SSA:2018-233-01)
2022-04-21 00:00:00
mageia
mageia
Updated libx11 packages fix security vulnerabilities
2018-09-21 02:17:55
freebsd
freebsd
libX11 -- Multiple vulnerabilities
2018-08-21 00:00:00
slackware
slackware
[slackware-security] libX11
2018-08-21 20:09:53
ibm
ibm
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in xorg-x11-libX11 (CVE-2018-14598 CVE-2018-14599 CVE-2018-14600)
2023-12-07 22:45:02
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in X.Org libx11 (CVE-2018-14599 CVE-2018-14598)
2019-04-11 21:00:01
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in xorg-x11
2023-12-07 22:45:03
gentoo
gentoo
X.Org X11 library: Multiple vulnerabilities
2018-11-09 00:00:00
suse
suse
Security update for libX11 (moderate)
2018-10-05 12:07:58
Security update for libX11 (important)
2018-08-31 12:07:54
osv
osv
libx11 - security update
2018-08-29 00:00:00
CVE-2018-14598
2018-08-24 19:29:01
CVE-2018-14600
2018-08-24 19:29:01
debian
debian
[SECURITY] [DLA 1482-1] libx11 security update
2018-08-29 22:18:10
amazon
amazon
Medium: libX11
2019-06-11 23:17:00
Medium: xorg-x11-server
2020-06-03 18:21:00
fedora
fedora
[SECURITY] Fedora 28 Update: libX11-1.6.7-1.fc28
2019-04-30 01:41:08
ubuntu
ubuntu
libx11 vulnerabilities
2018-08-30 00:00:00
libx11 vulnerabilities
2018-08-30 00:00:00
cloudfoundry
cloudfoundry
USN-3758-1: libx11 vulnerabilities | Cloud Foundry
2018-09-27 00:00:00
alpinelinux
alpinelinux
CVE-2018-14599
2018-08-24 19:29:00
CVE-2018-14598
2018-08-24 19:29:00
CVE-2018-14600
2018-08-24 19:29:00
redhatcve
redhatcve
CVE-2018-14598
2018-08-28 20:25:00
CVE-2018-14600
2018-08-28 20:25:32
CVE-2018-14599
2018-08-28 20:51:16
cve
cve
CVE-2018-14598
2018-08-24 19:29:00
CVE-2018-14600
2018-08-24 19:29:00
CVE-2018-14599
2018-08-24 19:29:00
cvelist
cvelist
CVE-2018-14600
2018-08-24 19:00:00
CVE-2018-14598
2018-08-24 19:00:00
CVE-2018-14599
2018-08-24 19:00:00
ubuntucve
ubuntucve
CVE-2018-14599
2018-08-24 00:00:00
CVE-2018-14600
2018-08-24 00:00:00
CVE-2018-14598
2018-08-24 00:00:00
debiancve
debiancve
CVE-2018-14599
2018-08-24 19:29:00
CVE-2018-14600
2018-08-24 19:29:00
CVE-2018-14598
2018-08-24 19:29:00
prion
prion
Out-of-bounds
2018-08-24 19:29:00
Buffer overflow
2018-08-24 19:29:00
Code injection
2018-08-24 19:29:00
veracode
veracode
Out-Of-Bounds Write
2018-08-23 06:03:01
Denial Of Service (DoS)
2018-08-27 08:35:54
Out-Of-Bounds Write
2018-08-23 03:42:19
github
github
ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok
2023-10-19 19:14:39
redhat
redhat
(RHSA-2019:2079) Moderate: Xorg security and bug fix update
2019-08-06 07:58:40
centos
centos
gdm, libX11, libxkbcommon, xorg security update
2019-08-30 02:52:02
oraclelinux
oraclelinux
Xorg security and bug fix update
2019-08-13 00:00:00
JSON
Related for SUSE_SU-2018-3102-1.NASL
nessus33openvas19mageia1freebsd1slackware1ibm4gentoo1suse2osv4debian1amazon2fedora1ubuntu2cloudfoundry1alpinelinux3redhatcve3cve3cvelist3ubuntucve3debiancve3prion3veracode3github1redhat1centos1oraclelinux1