Описание
Security update for libX11
This update for libX11 fixes the following security issues:
- CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062)
- CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068)
- CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15
Ссылки
- Link for SUSE-SU-2018:2955-1
- E-Mail link for SUSE-SU-2018:2955-1
- SUSE Security Ratings
- SUSE Bug 1102062
- SUSE Bug 1102068
- SUSE Bug 1102073
- SUSE CVE CVE-2018-14598 page
- SUSE CVE CVE-2018-14599 page
- SUSE CVE CVE-2018-14600 page
Описание
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
Затронутые продукты
Ссылки
- CVE-2018-14598
- SUSE Bug 1102073
Описание
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
Затронутые продукты
Ссылки
- CVE-2018-14599
- SUSE Bug 1102062
Описание
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
Затронутые продукты
Ссылки
- CVE-2018-14600
- SUSE Bug 1102068
- SUSE Bug 1178417