Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-7944

Опубликовано: 13 дек. 2016
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:x.org:libxfixes:*:*:*:*:*:*:x86:*
Версия до 5.0.2 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.00601
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 9 лет назад

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

CVSS3: 4.2
redhat
больше 9 лет назад

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

CVSS3: 9.8
debian
около 9 лет назад

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms m ...

suse-cvrf
около 9 лет назад

Security update for xorg-x11-libXfixes

CVSS3: 9.8
github
больше 3 лет назад

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.

EPSS

Процентиль: 69%
0.00601
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190