ISOMAN

CVE

CVE-2018-14600

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2018/08/21/6
  2. http://www.securityfocus.com/bid/105177
  3. http://www.securitytracker.com/id/1041543
  4. https://access.redhat.com/errata/RHSA-2019:2079
  5. https://bugzilla.suse.com/show_bug.cgi?id=1102068
  6. https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=dbf72805fd9d7b1846fe9a11b46f3994bfc27fea
  7. https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html
  8. https://lists.x.org/archives/xorg-announce/2018-August/002916.html
  9. https://security.gentoo.org/glsa/201811-01
  10. https://usn.ubuntu.com/3758-1/
  11. https://usn.ubuntu.com/3758-2/
  12. http://www.openwall.com/lists/oss-security/2018/08/21/6
  13. http://www.securityfocus.com/bid/105177
  14. http://www.securitytracker.com/id/1041543
  15. https://access.redhat.com/errata/RHSA-2019:2079
  16. https://bugzilla.suse.com/show_bug.cgi?id=1102068
  17. https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=dbf72805fd9d7b1846fe9a11b46f3994bfc27fea
  18. https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html
  19. https://lists.x.org/archives/xorg-announce/2018-August/002916.html
  20. https://security.gentoo.org/glsa/201811-01