ISOMAN

CVE

CVE-2018-14599

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2018/08/21/6
  2. http://www.securityfocus.com/bid/105177
  3. http://www.securitytracker.com/id/1041543
  4. https://access.redhat.com/errata/RHSA-2019:2079
  5. https://bugzilla.suse.com/show_bug.cgi?id=1102062
  6. https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0
  7. https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html
  8. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/
  9. https://lists.x.org/archives/xorg-announce/2018-August/002916.html
  10. https://security.gentoo.org/glsa/201811-01
  11. https://usn.ubuntu.com/3758-1/
  12. https://usn.ubuntu.com/3758-2/
  13. http://www.openwall.com/lists/oss-security/2018/08/21/6
  14. http://www.securityfocus.com/bid/105177
  15. http://www.securitytracker.com/id/1041543
  16. https://access.redhat.com/errata/RHSA-2019:2079
  17. https://bugzilla.suse.com/show_bug.cgi?id=1102062
  18. https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0
  19. https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html
  20. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/