p PatchFirst

CVE-2023-43787

CVE-2023-43787 · Libx11: integer overflow in xcreateimage() leading to a heap overflow

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

CVSS 7.8 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 8

    Versions
    • ≥ 0:1.6.8-8.el8: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 0:1.7.0-9.el9: Not affected (rpm)

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • libx11 Debian:12

    Versions
    • 2:1.8.4-2
    • 2:1.8.4-2+deb12u1
    Affected ranges
    • ECOSYSTEM: < 2:1.8.4-2+deb12u2

    Update to 2:1.8.4-2+deb12u2

  • libx11 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:1.8.7-1

    Update to 2:1.8.7-1

  • libx11 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:1.8.7-1

    Update to 2:1.8.7-1

  • libx11 Ubuntu:Pro:14.04:LTS

    Versions
    • 2:1.6.1-1ubuntu1
    • 2:1.6.1-1ubuntu2
    • 2:1.6.2-1ubuntu1
    • 2:1.6.2-1ubuntu2
    • 2:1.6.2-1ubuntu2.1
    • 2:1.6.2-1ubuntu2.1+esm1
    • 2:1.6.2-1ubuntu2.1+esm2
    • 2:1.6.2-1ubuntu2.1+esm3
    • 2:1.6.2-1ubuntu2.1+esm4
    Affected ranges
    • ECOSYSTEM: < 2:1.6.2-1ubuntu2.1+esm5

    Update to 2:1.6.2-1ubuntu2.1+esm5

  • libxpm Ubuntu:Pro:14.04:LTS

    Versions
    • 1:3.5.10-1
    • 1:3.5.10-1ubuntu0.1
    • 1:3.5.10-1ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.10-1ubuntu0.1+esm2

    Update to 1:3.5.10-1ubuntu0.1+esm2

  • motif Ubuntu:14.04:LTS

    Versions
    • 2.3.4-4
    • 2.3.4-5
    • 2.3.4-5ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:Pro:16.04:LTS

    Versions
    • 2:1.6.3-1ubuntu2
    • 2:1.6.3-1ubuntu2.1
    • 2:1.6.3-1ubuntu2.2
    • 2:1.6.3-1ubuntu2.2+esm1
    • 2:1.6.3-1ubuntu2.2+esm2
    • 2:1.6.3-1ubuntu2.2+esm3
    Affected ranges
    • ECOSYSTEM: < 2:1.6.3-1ubuntu2.2+esm4

    Update to 2:1.6.3-1ubuntu2.2+esm4

  • libxpm Ubuntu:Pro:16.04:LTS

    Versions
    • 1:3.5.11-1
    • 1:3.5.11-1ubuntu0.16.04.1
    • 1:3.5.11-1ubuntu0.16.04.1+esm1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.11-1ubuntu0.16.04.1+esm2

    Update to 1:3.5.11-1ubuntu0.16.04.1+esm2

  • motif Ubuntu:16.04:LTS

    Versions
    • 2.3.4-8ubuntu1
    • 2.3.4-9
    • 2.3.4-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:Pro:18.04:LTS

    Versions
    • 2:1.6.4-3
    • 2:1.6.4-3ubuntu0.1
    • 2:1.6.4-3ubuntu0.2
    • 2:1.6.4-3ubuntu0.3
    • 2:1.6.4-3ubuntu0.4
    • 2:1.6.4-3ubuntu0.4+esm1
    Affected ranges
    • ECOSYSTEM: < 2:1.6.4-3ubuntu0.4+esm2

    Update to 2:1.6.4-3ubuntu0.4+esm2

  • libxpm Ubuntu:Pro:18.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.18.04.2
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.18.04.2+esm1

    Update to 1:3.5.12-1ubuntu0.18.04.2+esm1

  • motif Ubuntu:18.04:LTS

    Versions
    • 2.3.7-2
    • 2.3.8-1
    • 2.3.8-2
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:20.04:LTS

    Versions
    • 2:1.6.8-1
    • 2:1.6.9-2
    • 2:1.6.9-2ubuntu1
    • 2:1.6.9-2ubuntu1.1
    • 2:1.6.9-2ubuntu1.2
    • 2:1.6.9-2ubuntu1.5
    Affected ranges
    • ECOSYSTEM: < 2:1.6.9-2ubuntu1.6

    Update to 2:1.6.9-2ubuntu1.6

  • libxpm Ubuntu:20.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1ubuntu0.20.04.1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.20.04.2

    Update to 1:3.5.12-1ubuntu0.20.04.2

  • motif Ubuntu:20.04:LTS

    Versions
    • 2.3.8-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:22.04:LTS

    Versions
    • 2:1.7.2-1
    • 2:1.7.2-2
    • 2:1.7.2-2build1
    • 2:1.7.5-1
    • 2:1.7.5-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2:1.7.5-1ubuntu0.3

    Update to 2:1.7.5-1ubuntu0.3

  • libxpm Ubuntu:22.04:LTS

    Versions
    • 1:3.5.12-1
    • 1:3.5.12-1build1
    • 1:3.5.12-1build2
    • 1:3.5.12-1ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1ubuntu0.22.04.2

    Update to 1:3.5.12-1ubuntu0.22.04.2

  • motif Ubuntu:22.04:LTS

    Versions
    • 2.3.8-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libx11 Ubuntu:24.04:LTS

    Affected ranges
    • ECOSYSTEM: < 2:1.8.6-1ubuntu1

    Update to 2:1.8.6-1ubuntu1

  • libxpm Ubuntu:24.04:LTS

    Affected ranges
    • ECOSYSTEM: < 1:3.5.12-1.1ubuntu1

    Update to 1:3.5.12-1.1ubuntu1

Original sources

Check your server →