Integer Overflow

🗓️ 12 Oct 2023 07:01:18Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 46 Views

libX11.so integer overflow vulnerability in XCreateImage functio

Reporter	Title	Published	Views	Family All 231
GithubExploit	Exploit for Uncontrolled Resource Consumption in X.Org Libx11	16 Jan 202420:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	2 Feb 202414:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities	15 Apr 202502:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management	25 Jun 202520:04	–	ibm
Tenable Nessus	Amazon Linux 2023 : libXpm, libXpm-devel (ALAS2023-2023-382)	24 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libX11, libX11-common, libX11-devel (ALAS2023-2023-383)	24 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2023-2295)	20 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libX11 (ALAS-2023-2296)	20 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libX11 (ALAS-2023-2356)	4 Dec 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libXpm (ALAS-2024-2389)	9 Jan 202400:00	–	nessus

Vulners

Node

x.org libx11Match1.8.3-r0cpp

AND

x.org libx11Match1.8.3-r1cpp

AND

x.org libx11Match1.8.4-r1cpp

AND

x.org libx11Match1.8.1-r1cpp

AND

x.org libx11Match1.8.2-r0cpp

AND

x.org libx11Match1.8.4-r0cpp

AND

alpinelinux alpine_linuxMatch3.17

OR

x.org libx11Match1.8-r1cpp

AND

x.org libx11Match1.7.5-r0cpp

AND

x.org libx11Match1.8-r0cpp

AND

alpinelinux alpine_linuxMatch3.16

OR

x.org libx11Match1.8.4-r2cpp

AND

x.org libx11Match1.8.4-r4cpp

AND

x.org libx11Match1.8.4-r3cpp

AND

alpinelinux alpine_linuxMatch3.18

OR

x.org libx11Match1.6.9-r0cpp

AND

x.org libx11Match1.7.2-r0cpp

AND

x.org libx11Match1.8.6-r0cpp

AND

x.org libx11Match1.8.4-r4cpp

AND

x.org libx11Match1.8.4-r2cpp

AND

x.org libx11Match1.8.4-r3cpp

AND

x.org libx11Match1.7.5-r0cpp

AND

x.org libx11Match1.8.2-r0cpp

AND

x.org libx11Match1.7.3.1-r0cpp

AND

x.org libx11Match1.8.4-r0cpp

AND

x.org libx11Match1.7.1-r0cpp

AND

x.org libx11Match1.8-r0cpp

AND

x.org libx11Match1.8.4-r1cpp

AND

x.org libx11Match1.7.0-r0cpp

AND

x.org libx11Match1.8.2-r1cpp

AND

x.org libx11Match1.8.5-r2cpp

AND

x.org libx11Match1.8.2-r2cpp

AND

x.org libx11Match1.8.3-r1cpp

AND

x.org libx11Match1.8.1-r1cpp

AND

alpinelinux alpine_linuxMatchedge

OR

libx11.so libx11.soRange6.2.0.debug–6.4.0cpp

Source	Link
gitlab	www.gitlab.freedesktop.org/xorg/lib/libx11/-/commit/7916869d16bdd115ac5be30a67c3749907aea6a0
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2023-43787
jfrog	www.jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/
security	www.security.netapp.com/advisory/ntap-20231103-0006/
openwall	www.openwall.com/lists/oss-security/2024/01/24/9
access	www.access.redhat.com/errata/RHSA-2024:2145
access	www.access.redhat.com/errata/RHSA-2024:2973

22 May 2024 18:46Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00084

SSVC

libx11 integer overflow vulnerability xcreateimage insufficient validation checks arbitrary code execution elevated privileges