Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2023-2296
HistoryOct 12, 2023 - 3:09 p.m.

Medium: libX11

2023-10-1215:09:00
alas.aws.amazon.com
12
libx11
security advisory
out-of-bounds memory access
integer overflow
cve-2023-43785
cve-2023-43787
amazon linux 2

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Issue Overview:

libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)

libX11: integer overflow in XCreateImage() leading to a heap overflow. (CVE-2023-43787)

Affected Packages:

libX11

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update libX11 to update your system.

New Packages:

aarch64:  
    libX11-1.6.7-3.amzn2.0.4.aarch64  
    libX11-devel-1.6.7-3.amzn2.0.4.aarch64  
    libX11-debuginfo-1.6.7-3.amzn2.0.4.aarch64  
  
i686:  
    libX11-1.6.7-3.amzn2.0.4.i686  
    libX11-devel-1.6.7-3.amzn2.0.4.i686  
    libX11-debuginfo-1.6.7-3.amzn2.0.4.i686  
  
noarch:  
    libX11-common-1.6.7-3.amzn2.0.4.noarch  
  
src:  
    libX11-1.6.7-3.amzn2.0.4.src  
  
x86_64:  
    libX11-1.6.7-3.amzn2.0.4.x86_64  
    libX11-devel-1.6.7-3.amzn2.0.4.x86_64  
    libX11-debuginfo-1.6.7-3.amzn2.0.4.x86_64

Additional References

Red Hat: CVE-2023-43785, CVE-2023-43787

Mitre: CVE-2023-43785, CVE-2023-43787

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64libx11< 1.6.7-3.amzn2.0.4libX11-1.6.7-3.amzn2.0.4.aarch64.rpm
Amazon Linux2aarch64libx11-devel< 1.6.7-3.amzn2.0.4libX11-devel-1.6.7-3.amzn2.0.4.aarch64.rpm
Amazon Linux2aarch64libx11-debuginfo< 1.6.7-3.amzn2.0.4libX11-debuginfo-1.6.7-3.amzn2.0.4.aarch64.rpm
Amazon Linux2i686libx11< 1.6.7-3.amzn2.0.4libX11-1.6.7-3.amzn2.0.4.i686.rpm
Amazon Linux2i686libx11-devel< 1.6.7-3.amzn2.0.4libX11-devel-1.6.7-3.amzn2.0.4.i686.rpm
Amazon Linux2i686libx11-debuginfo< 1.6.7-3.amzn2.0.4libX11-debuginfo-1.6.7-3.amzn2.0.4.i686.rpm
Amazon Linux2noarchlibx11-common< 1.6.7-3.amzn2.0.4libX11-common-1.6.7-3.amzn2.0.4.noarch.rpm
Amazon Linux2x86_64libx11< 1.6.7-3.amzn2.0.4libX11-1.6.7-3.amzn2.0.4.x86_64.rpm
Amazon Linux2x86_64libx11-devel< 1.6.7-3.amzn2.0.4libX11-devel-1.6.7-3.amzn2.0.4.x86_64.rpm
Amazon Linux2x86_64libx11-debuginfo< 1.6.7-3.amzn2.0.4libX11-debuginfo-1.6.7-3.amzn2.0.4.x86_64.rpm

Related

nessus 53
amazon 3
slackware 1
mageia 1
openvas 38
cloudfoundry 3
almalinux 2
osv 10
redhat 5
ubuntu 4
debian 3
freebsd 1
oraclelinux 2
redos 1
photon 3
fedora 1
redhatcve 2
prion 2
veracode 2
ubuntucve 2
cbl_mariner 2
nvd 2
cve 2
debiancve 2
alpinelinux 2
vulnrichment 1
cvelist 2
ibm 4
nessus
nessus
Amazon Linux 2 : libX11 (ALAS-2023-2296)
2023-10-20 00:00:00
Amazon Linux AMI : libX11 (ALAS-2023-1859)
2023-10-25 00:00:00
EulerOS 2.0 SP11 : libX11 (EulerOS-SA-2023-3277)
2024-01-16 00:00:00
amazon
amazon
Medium: libX11
2023-10-12 15:48:00
Medium: libXpm
2023-10-30 23:31:00
Medium: libXpm
2023-10-12 15:09:00
slackware
slackware
[slackware-security] libX11
2023-10-03 22:25:17
mageia
mageia
Updated libX11 packages fix security vulnerabilities
2023-10-14 01:56:51
openvas
openvas
Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2024-1657)
2024-05-16 00:00:00
Ubuntu: Security Advisory (USN-6407-1)
2023-10-04 00:00:00
Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2024-1065)
2024-01-09 00:00:00
cloudfoundry
cloudfoundry
USN-6407-1: libx11 vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
USN-6407-2: libx11 vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
USN-6408-1: libXpm vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
almalinux
almalinux
Moderate: libX11 security update
2024-05-22 00:00:00
Moderate: libX11 security update
2024-04-30 00:00:00
osv
osv
libx11 vulnerabilities
2023-10-10 14:35:08
libx11 - security update
2023-10-05 00:00:00
Moderate: libX11 security update
2024-05-22 00:00:00
redhat
redhat
(RHSA-2024:2973) Moderate: libX11 security update
2024-05-22 06:35:14
(RHSA-2024:2145) Moderate: libX11 security update
2024-04-30 06:14:52
(RHSA-2024:3570) Low: Red Hat Single Sign-On 7.6.9 for OpenShift image enhancement update
2024-06-03 19:45:22
ubuntu
ubuntu
libx11 vulnerabilities
2023-10-10 00:00:00
libx11 vulnerabilities
2023-10-03 00:00:00
libXpm vulnerabilities
2023-10-03 00:00:00
debian
debian
[SECURITY] [DLA 3602-1] libx11 security update
2023-10-05 10:39:13
[SECURITY] [DSA 5517-1] libx11 security update
2023-10-05 18:18:00
[SECURITY] [DLA 3603-1] libxpm security update
2023-10-05 11:09:57
freebsd
freebsd
11/libX11 multiple vulnerabilities
2023-09-22 00:00:00
oraclelinux
oraclelinux
libX11 security update
2024-05-02 00:00:00
libX11 security update
2024-05-23 00:00:00
redos
redos
ROS-20231018-04
2023-10-18 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0112
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0486
2023-10-11 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0668
2023-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libX11-1.8.7-1.fc39
2023-10-07 03:24:34
redhatcve
redhatcve
CVE-2023-43785
2023-10-05 07:25:04
CVE-2023-43787
2023-10-05 07:55:11
prion
prion
Out-of-bounds
2023-10-10 13:15:00
Integer overflow
2023-10-10 13:15:00
veracode
veracode
Integer Overflow
2023-10-12 07:01:18
Out-of-bounds Read
2023-10-12 09:36:29
ubuntucve
ubuntucve
CVE-2023-43787
2023-10-03 00:00:00
CVE-2023-43785
2023-10-03 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-43785 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1
2023-11-08 02:07:28
nvd
nvd
CVE-2023-43785
2023-10-10 13:15:21
CVE-2023-43787
2023-10-10 13:15:22
cve
cve
CVE-2023-43785
2023-10-10 13:15:21
CVE-2023-43787
2023-10-10 13:15:22
debiancve
debiancve
CVE-2023-43785
2023-10-10 13:15:21
CVE-2023-43787
2023-10-10 13:15:22
alpinelinux
alpinelinux
CVE-2023-43785
2023-10-10 13:15:21
CVE-2023-43787
2023-10-10 13:15:22
vulnrichment
vulnrichment
CVE-2023-43785 Libx11: out-of-bounds memory access in _xkbreadkeysyms()
2023-10-10 12:26:02
cvelist
cvelist
CVE-2023-43785 Libx11: out-of-bounds memory access in _xkbreadkeysyms()
2023-10-10 12:26:02
CVE-2023-43787 Libx11: integer overflow in xcreateimage() leading to a heap overflow
2023-10-10 12:26:08
ibm
ibm
Security Bulletin: App Connect Enterprise Certified Container UBI updates
2024-02-02 14:30:02
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities
2024-06-26 12:12:00
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
2024-06-20 20:32:32

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for ALAS2-2023-2296
nessus53amazon3slackware1mageia1openvas38cloudfoundry3almalinux2osv10redhat5ubuntu4debian3freebsd1oraclelinux2redos1photon3fedora1redhatcve2prion2veracode2ubuntucve2cbl_mariner2nvd2cve2debiancve2alpinelinux2vulnrichment1cvelist2ibm4