Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-7952

Опубликовано: 13 дек. 2016
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:x.org:libxtst:*:*:*:*:*:*:*:*
Версия до 1.2.2 (включая)

EPSS

Процентиль: 83%
0.02289
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 10 лет назад

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.

CVSS3: 5
redhat
около 10 лет назад

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.

CVSS3: 7.5
debian
почти 10 лет назад

X.org libXtst before 1.2.3 allows remote X servers to cause a denial o ...

CVSS3: 7.5
github
больше 4 лет назад

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.

CVSS3: 9.8
altlinux
почти 6 лет назад

ALT-PU-2020-3326: package `libXtst` update to version 1.2.3-alt1

EPSS

Процентиль: 83%
0.02289
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20