Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:3012-1

Опубликовано: 05 окт. 2018
Источник: suse-cvrf

Описание

Security update for libX11

This update for libX11 fixes the following security issues:

  • CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062)
  • CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068)
  • CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libX11-1.6.5-lp150.2.3.1
libX11-6-1.6.5-lp150.2.3.1
libX11-6-32bit-1.6.5-lp150.2.3.1
libX11-data-1.6.5-lp150.2.3.1
libX11-devel-1.6.5-lp150.2.3.1
libX11-devel-32bit-1.6.5-lp150.2.3.1
libX11-xcb1-1.6.5-lp150.2.3.1
libX11-xcb1-32bit-1.6.5-lp150.2.3.1

Ссылки

Описание

An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).

Затронутые продукты
openSUSE Leap 15.0:libX11-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-32bit-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-data-1.6.5-lp150.2.3.1
Ссылки

Описание

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

Затронутые продукты
openSUSE Leap 15.0:libX11-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-32bit-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-data-1.6.5-lp150.2.3.1
Ссылки

Описание

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.

Затронутые продукты
openSUSE Leap 15.0:libX11-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-6-32bit-1.6.5-lp150.2.3.1
openSUSE Leap 15.0:libX11-data-1.6.5-lp150.2.3.1
Ссылки