Описание
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
Отчет
This issue affects the versions of libXcursor as shipped with Red Hat Enterprise Linux 5, 6, and 7.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libXcursor | Will not fix | ||
| Red Hat Enterprise Linux 6 | libXcursor | Will not fix | ||
| Red Hat Enterprise Linux 8 | libXcursor | Not affected | ||
| Red Hat Enterprise Linux 7 | freeglut | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libdrm | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libepoxy | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libglvnd | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libinput | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libwacom | Fixed | RHSA-2018:3059 | 30.10.2018 |
| Red Hat Enterprise Linux 7 | libX11 | Fixed | RHSA-2018:3059 | 30.10.2018 |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1611599libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c
4.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 8 лет назад
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
CVSS3: 9.8
nvd
около 8 лет назад
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
CVSS3: 9.8
debian
около 8 лет назад
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows ...
4.5 Medium
CVSS3