kritisch
CVE-2016-7943
libX11: Insufficient validation of server responses in FontNames
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.0CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (mittel), Ubuntu (niedrig).
Beschreibung
The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.2 | libx11 | 1.6.3-r1 |
| alpine 3.3 | libx11 | 1.6.3-r3 |
| debian 11 | libx11 | 2:1.6.4-1 |
| debian 12 | libx11 | 2:1.6.4-1 |
| debian 13 | libx11 | 2:1.6.4-1 |
| debian 14 | libx11 | 2:1.6.4-1 |
| debian 7 | libx11 | 2:1.5.0-1+deb7u3 |
| debian 8 | libx11 | 2:1.6.2-3+deb8u1 |
| echo | libx11 | 2:1.6.4-1 |
| Red Hat | libX11, libX11-common, libX11-devel | kein Fix angegeben |
| seal Red Hat 6 | libx11, seal-libx11 | 1.6.4-4.el6_10+sp999 |
| ubuntu 14.04 | libx11 | 2:1.6.2-1ubuntu2.1 |
Alle 20 Einträge aus 17 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.2 | libx11 | 1.6.3-r1 |
| alpine 3.3 | libx11 | 1.6.3-r3 |
| debian 11 | libx11 | 2:1.6.4-1 |
| debian 12 | libx11 | 2:1.6.4-1 |
| debian 13 | libx11 | 2:1.6.4-1 |
| debian 14 | libx11 | 2:1.6.4-1 |
| debian 7 | libx11 | 2:1.5.0-1+deb7u3 |
| debian 8 | libx11 | 2:1.6.2-3+deb8u1 |
| echo | libx11 | 2:1.6.4-1 |
| Red Hat | libX11 | kein Fix angegeben |
| Red Hat | libX11-common | kein Fix angegeben |
| Red Hat | libX11-devel | kein Fix angegeben |
| seal Red Hat 6 | libx11 | 1.6.4-4.el6_10+sp999 |
| seal Red Hat 6 | seal-libx11 | 1.6.4-4.el6_10+sp999 |
| ubuntu 14.04 | libx11 | 2:1.6.2-1ubuntu2.1 |
| ubuntu 14.04-ESM | libx11 | 2:1.6.2-1ubuntu2.1 |
| ubuntu 16.04 | libx11 | 2:1.6.3-1ubuntu2.1 |
| ubuntu 16.04-ESM | libx11 | 2:1.6.3-1ubuntu2.1 |
| ubuntu 18.04 | libx11 | 2:1.6.4-1 |
| ubuntu 18.04-ESM | libx11 | 2:1.6.4-1 |
Referenzen
- http://www.openwall.com/lists/oss-security/2016/10/04/2
- http://www.openwall.com/lists/oss-security/2016/10/04/4
- http://www.securityfocus.com/bid/93362
- http://www.securitytracker.com/id/1036945
- https://access.redhat.com/security/cve/CVE-2016-7943
- https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=8c29f1607a31dac0911e45a0dd3d74173822b3c9
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMCVDXMFPXR7QGMKDG22WPPJCXH2X3L7/
- https://lists.x.org/archives/xorg-announce/2016-October/002720.html