Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6407-1
HistoryOct 03, 2023 - 12:00 a.m.

libx11 vulnerabilities

2023-10-0300:00:00
ubuntu.com
41
ubuntu
x11 client-side library
remote attacker
denial of service
arbitrary code
cve-2023-43785
cve-2023-43786
cve-2023-43787
xpm image files

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • libx11 - X11 client-side library

Details

Gregory James Duck discovered that libx11 incorrectly handled certain
keyboard symbols. If a user were tricked into connecting to a malicious X
server, a remote attacker could use this issue to cause libx11 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2023-43785)

Yair Mizrahi discovered that libx11 incorrectly handled certain malformed
XPM image files. If a user were tricked into opening a specially crafted
XPM image file, a remote attacker could possibly use this issue to consume
memory, leading to a denial of service. (CVE-2023-43786)

Yair Mizrahi discovered that libx11 incorrectly handled certain malformed
XPM image files. If a user were tricked into opening a specially crafted
XPM image file, a remote attacker could use this issue to cause libx11 to
crash, leading to a denial of service, or possibly execute arbitrary code.
(CVE-2023-43787)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchlibx11-6< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-6-dbgsym< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-data< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-dev< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-doc< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-xcb-dev< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-xcb1< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu23.04noarchlibx11-xcb1-dbgsym< 2:1.8.4-2ubuntu0.3UNKNOWN
Ubuntu22.04noarchlibx11-6< 2:1.7.5-1ubuntu0.3UNKNOWN
Ubuntu22.04noarchlibx11-6-dbgsym< 2:1.7.5-1ubuntu0.3UNKNOWN
Rows per page:
1-10 of 251

Related

nessus 50
openvas 37
slackware 1
cloudfoundry 3
mageia 1
debian 3
osv 10
redos 1
ubuntu 3
freebsd 1
oraclelinux 1
almalinux 1
redhat 1
photon 3
amazon 7
fedora 2
prion 3
redhatcve 3
ubuntucve 3
cve 3
debiancve 3
veracode 3
cbl_mariner 3
alpinelinux 3
cvelist 3
githubexploit 1
ibm 1
nessus
nessus
EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1089)
2024-01-16 00:00:00
EulerOS 2.0 SP9 : libX11 (EulerOS-SA-2023-3310)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : libX11 (EulerOS-SA-2023-3277)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2024-1065)
2024-01-09 00:00:00
Ubuntu: Security Advisory (USN-6407-1)
2023-10-04 00:00:00
Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2023-3342)
2023-12-12 00:00:00
slackware
slackware
[slackware-security] libX11
2023-10-03 22:25:17
cloudfoundry
cloudfoundry
USN-6407-1: libx11 vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
USN-6407-2: libx11 vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
USN-6408-1: libXpm vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
mageia
mageia
Updated libX11 packages fix security vulnerabilities
2023-10-14 01:56:51
debian
debian
[SECURITY] [DLA 3602-1] libx11 security update
2023-10-05 10:39:39
[SECURITY] [DSA 5517-1] libx11 security update
2023-10-05 18:18:00
[SECURITY] [DLA 3603-1] libxpm security update
2023-10-05 11:10:21
osv
osv
libx11 - security update
2023-10-05 00:00:00
libx11 - security update
2023-10-05 00:00:00
Moderate: libX11 security update
2024-04-30 00:00:00
redos
redos
ROS-20231018-04
2023-10-18 00:00:00
ubuntu
ubuntu
libx11 vulnerabilities
2023-10-10 00:00:00
libXpm vulnerabilities
2023-10-23 00:00:00
libXpm vulnerabilities
2023-10-03 00:00:00
freebsd
freebsd
11/libX11 multiple vulnerabilities
2023-09-22 00:00:00
oraclelinux
oraclelinux
libX11 security update
2024-05-02 00:00:00
almalinux
almalinux
Moderate: libX11 security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2145) Moderate: libX11 security update
2024-04-30 06:14:52
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0112
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0486
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0668
2023-10-12 00:00:00
amazon
amazon
Medium: libX11
2023-10-12 15:09:00
Medium: libX11
2023-10-12 15:48:00
Medium: libXpm
2023-10-30 23:31:00
fedora
fedora
[SECURITY] Fedora 39 Update: libX11-1.8.7-1.fc39
2023-10-07 03:24:34
[SECURITY] Fedora 39 Update: libXpm-3.5.17-1.fc39
2023-11-03 18:53:48
prion
prion
Out-of-bounds
2023-10-10 13:15:00
Integer overflow
2023-10-10 13:15:00
Race condition
2023-10-10 13:15:00
redhatcve
redhatcve
CVE-2023-43785
2023-10-05 07:25:04
CVE-2023-43786
2023-10-05 07:25:02
CVE-2023-43787
2023-10-05 07:55:11
ubuntucve
ubuntucve
CVE-2023-43785
2023-10-03 00:00:00
CVE-2023-43787
2023-10-03 00:00:00
CVE-2023-43786
2023-10-03 00:00:00
cve
cve
CVE-2023-43785
2023-10-10 12:26:02
CVE-2023-43787
2023-10-10 12:26:08
CVE-2023-43786
2023-10-10 12:26:07
debiancve
debiancve
CVE-2023-43785
2023-10-10 12:26:02
CVE-2023-43787
2023-10-10 12:26:08
CVE-2023-43786
2023-10-10 12:26:07
veracode
veracode
Out-of-bounds Read
2023-10-12 09:36:29
Integer Overflow
2023-10-12 07:01:18
Denial Of Service (DoS) Through Infinite Loop
2023-10-12 07:21:34
cbl_mariner
cbl_mariner
CVE-2023-43785 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
CVE-2023-43786 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
alpinelinux
alpinelinux
CVE-2023-43785
2023-10-10 12:26:02
CVE-2023-43787
2023-10-10 12:26:08
CVE-2023-43786
2023-10-10 12:26:07
cvelist
cvelist
CVE-2023-43785 Libx11: out-of-bounds memory access in _xkbreadkeysyms()
2023-10-10 12:26:02
CVE-2023-43787 Libx11: integer overflow in xcreateimage() leading to a heap overflow
2023-10-10 12:26:08
CVE-2023-43786 Libx11: stack exhaustion from infinite recursion in putsubimage()
2023-10-10 12:26:07
githubexploit
githubexploit
Exploit for CVE-2023-43786
2024-01-16 20:04:05
ibm
ibm
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-02-02 14:30:02

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON
Related for USN-6407-1
nessus50openvas37slackware1cloudfoundry3mageia1debian3osv10redos1ubuntu3freebsd1oraclelinux1almalinux1redhat1photon3amazon7fedora2prion3redhatcve3ubuntucve3cve3debiancve3veracode3cbl_mariner3alpinelinux3cvelist3githubexploit1ibm1