CVE-2016-7952

2016-12-1300:00:00

ubuntu.com

0.01 Low

EPSS

Percentile

83.5%

JSON

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of
service (infinite loop) via a reply in the (1) XRecordStartOfData, (2)
XRecordEndOfData, or (3) XRecordClientDied category without a client
sequence and with attached data.

Notes

Author	Note
sbeattie	same commit as CVE-2016-7951
msalatore	patch released in 2:1.2.2-1+deb8u1

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu18.10noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu19.04noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu19.10noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu20.04noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu20.10noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu21.04noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu21.10noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu22.04noarchlibxtst< 2:1.2.3-1UNKNOWN
ubuntu22.10noarchlibxtst< 2:1.2.3-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	18.10	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	19.04	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	19.10	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	20.04	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	20.10	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	21.04	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	21.10	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	22.04	noarch	libxtst	< 2:1.2.3-1	UNKNOWN
ubuntu	22.10	noarch	libxtst	< 2:1.2.3-1	UNKNOWN