p PatchFirst

CVE-2023-43786

CVE-2023-43786 · Libx11: stack exhaustion from infinite recursion in putsubimage()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

CVSS 5.5 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 8

    Versions
    • ≥ 0:1.6.8-8.el8: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 0:1.7.0-9.el9: Not affected (rpm)

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • libx11 Debian:12

    Versions
    • 2:1.8.4-2
    • 2:1.8.4-2+deb12u1
    Affected ranges
    • ECOSYSTEM: < 2:1.8.4-2+deb12u2

    Update to 2:1.8.4-2+deb12u2

  • libx11 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:1.8.7-1

    Update to 2:1.8.7-1

  • libx11 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:1.8.7-1

    Update to 2:1.8.7-1

  • libx11 Ubuntu:Pro:14.04:LTS

    Versions
    • 2:1.6.1-1ubuntu1
    • 2:1.6.1-1ubuntu2
    • 2:1.6.2-1ubuntu1
    • 2:1.6.2-1ubuntu2
    • 2:1.6.2-1ubuntu2.1
    • 2:1.6.2-1ubuntu2.1+esm1
    • 2:1.6.2-1ubuntu2.1+esm2
    • 2:1.6.2-1ubuntu2.1+esm3
    • 2:1.6.2-1ubuntu2.1+esm4
    Affected ranges
    • ECOSYSTEM: < 2:1.6.2-1ubuntu2.1+esm5

    Update to 2:1.6.2-1ubuntu2.1+esm5

  • libxpm Ubuntu:Pro:14.04:LTS

    Versions
    • 1:3.5.10-1
    • 1:3.5.10-1ubuntu0.1
    • 1:3.5.10-1ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.10-1ubuntu0.1+esm2

    Update to 1:3.5.10-1ubuntu0.1+esm2

  • motif Ubuntu:14.04:LTS

    Versions
    • 2.3.4-4
    • 2.3.4-5
    • 2.3.4-5ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:Pro:16.04:LTS

    Versions
    • 2:1.6.3-1ubuntu2
    • 2:1.6.3-1ubuntu2.1
    • 2:1.6.3-1ubuntu2.2
    • 2:1.6.3-1ubuntu2.2+esm1
    • 2:1.6.3-1ubuntu2.2+esm2
    • 2:1.6.3-1ubuntu2.2+esm3
    Affected ranges
    • ECOSYSTEM: < 2:1.6.3-1ubuntu2.2+esm4

    Update to 2:1.6.3-1ubuntu2.2+esm4

  • libxpm Ubuntu:Pro:16.04:LTS

    Versions
    • 1:3.5.11-1
    • 1:3.5.11-1ubuntu0.16.04.1
    • 1:3.5.11-1ubuntu0.16.04.1+esm1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.11-1ubuntu0.16.04.1+esm2

    Update to 1:3.5.11-1ubuntu0.16.04.1+esm2

  • motif Ubuntu:16.04:LTS

    Versions
    • 2.3.4-8ubuntu1
    • 2.3.4-9
    • 2.3.4-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:Pro:18.04:LTS

    Versions
    • 2:1.6.4-3
    • 2:1.6.4-3ubuntu0.1
    • 2:1.6.4-3ubuntu0.2
    • 2:1.6.4-3ubuntu0.3
    • 2:1.6.4-3ubuntu0.4
    • 2:1.6.4-3ubuntu0.4+esm1
    Affected ranges
    • ECOSYSTEM: < 2:1.6.4-3ubuntu0.4+esm2

    Update to 2:1.6.4-3ubuntu0.4+esm2

  • libxpm Ubuntu:Pro:18.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.18.04.2
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.18.04.2+esm1

    Update to 1:3.5.12-1ubuntu0.18.04.2+esm1

  • motif Ubuntu:18.04:LTS

    Versions
    • 2.3.7-2
    • 2.3.8-1
    • 2.3.8-2
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:20.04:LTS

    Versions
    • 2:1.6.8-1
    • 2:1.6.9-2
    • 2:1.6.9-2ubuntu1
    • 2:1.6.9-2ubuntu1.1
    • 2:1.6.9-2ubuntu1.2
    • 2:1.6.9-2ubuntu1.5
    Affected ranges
    • ECOSYSTEM: < 2:1.6.9-2ubuntu1.6

    Update to 2:1.6.9-2ubuntu1.6

  • libxpm Ubuntu:20.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.20.04.1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.20.04.2

    Update to 1:3.5.12-1ubuntu0.20.04.2

  • motif Ubuntu:20.04:LTS

    Versions
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:22.04:LTS

    Versions
    • 2:1.7.2-1
    • 2:1.7.2-2
    • 2:1.7.2-2build1
    • 2:1.7.5-1
    • 2:1.7.5-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2:1.7.5-1ubuntu0.3

    Update to 2:1.7.5-1ubuntu0.3

  • libxpm Ubuntu:22.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1build1
    • 1:3.5.12-1build2
    • 1:3.5.12-1ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.22.04.2

    Update to 1:3.5.12-1ubuntu0.22.04.2

  • motif Ubuntu:22.04:LTS

    Versions
    • 2.3.8-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:24.04:LTS

    Affected ranges
    • ECOSYSTEM: < 2:1.8.6-1ubuntu1

    Update to 2:1.8.6-1ubuntu1

  • libxpm Ubuntu:24.04:LTS

    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1.1ubuntu1

    Update to 1:3.5.12-1.1ubuntu1

Original sources

Check your server →