p PatchFirst

CVE-2016-7949

CVE-2016-7949

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.

CVSS 9.8 · Critical · EPSS 3.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libxrender Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:0.9.10-1

    Update to 1:0.9.10-1

  • libxrender Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:0.9.10-1

    Update to 1:0.9.10-1

  • libxrender Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:0.9.10-1

    Update to 1:0.9.10-1

  • libxrender Ubuntu:14.04:LTS

    Versions
    • 1:0.9.8-1
    • 1:0.9.8-1build0.14.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxrender Ubuntu:Pro:16.04:LTS

    Versions
    • 1:0.9.9-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:0.9.9-0ubuntu1+esm1

    Update to 1:0.9.9-0ubuntu1+esm1

Original sources

Check your server →