Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2016-2021 Tenable Network Security, Inc.OPENSUSE-2016-1214.NASL
HistoryOct 24, 2016 - 12:00 a.m.

openSUSE Security Update : X Window System client libraries (openSUSE-2016-1214)

2016-10-2400:00:00
This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.
www.tenable.com
19

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.019

Percentile

88.6%

JSON

This update for the X Window System client libraries fixes a class of privilege escalation issues.

A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission level boundaries.

libX11, libXfixes, libXi, libXrandr, libXrender, libXtst, libXv, libXvMC were fixed, specifically :

libX11 :

  • CVE-2016-7942: insufficient validation of data from the X server allowed out of boundary memory read (bsc#1002991)

libXfixes :

  • CVE-2016-7944: insufficient validation of data from the X server can cause an integer overflow on 32 bit architectures (bsc#1002995)

libXi :

  • CVE-2016-7945, CVE-2016-7946: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1002998)

libXtst :

  • CVE-2016-7951, CVE-2016-7952: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1003012)

libXv :

  • CVE-2016-5407: insufficient validation of data from the X server can cause out of boundary memory and memory corruption (bsc#1003017)

libXvMC :

  • CVE-2016-7953: insufficient validation of data from the X server can cause a one byte buffer read underrun (bsc#1003023)

libXrender :

  • CVE-2016-7949, CVE-2016-7950: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003002)

libXrandr :

  • CVE-2016-7947, CVE-2016-7948: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003000)

This update was imported from the SUSE:SLE-12:Update update project.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2016-1214.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(94220);
  script_version("2.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2016-5407", "CVE-2016-7942", "CVE-2016-7944", "CVE-2016-7945", "CVE-2016-7946", "CVE-2016-7947", "CVE-2016-7948", "CVE-2016-7949", "CVE-2016-7950", "CVE-2016-7951", "CVE-2016-7952", "CVE-2016-7953");

  script_name(english:"openSUSE Security Update : X Window System client libraries (openSUSE-2016-1214)");
  script_summary(english:"Check for the openSUSE-2016-1214 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for the X Window System client libraries fixes a class of
privilege escalation issues.

A malicious X Server could send specially crafted data to X clients,
which allowed for triggering crashes, or privilege escalation if this
relationship was untrusted or crossed user or permission level
boundaries.

libX11, libXfixes, libXi, libXrandr, libXrender, libXtst, libXv,
libXvMC were fixed, specifically :

libX11 :

  - CVE-2016-7942: insufficient validation of data from the
    X server allowed out of boundary memory read
    (bsc#1002991)

libXfixes :

  - CVE-2016-7944: insufficient validation of data from the
    X server can cause an integer overflow on 32 bit
    architectures (bsc#1002995)

libXi :

  - CVE-2016-7945, CVE-2016-7946: insufficient validation of
    data from the X server can cause out of boundary memory
    access or endless loops (Denial of Service)
    (bsc#1002998)

libXtst :

  - CVE-2016-7951, CVE-2016-7952: insufficient validation of
    data from the X server can cause out of boundary memory
    access or endless loops (Denial of Service)
    (bsc#1003012)

libXv :

  - CVE-2016-5407: insufficient validation of data from the
    X server can cause out of boundary memory and memory
    corruption (bsc#1003017)

libXvMC :

  - CVE-2016-7953: insufficient validation of data from the
    X server can cause a one byte buffer read underrun
    (bsc#1003023)

libXrender :

  - CVE-2016-7949, CVE-2016-7950: insufficient validation of
    data from the X server can cause out of boundary memory
    writes (bsc#1003002)

libXrandr :

  - CVE-2016-7947, CVE-2016-7948: insufficient validation of
    data from the X server can cause out of boundary memory
    writes (bsc#1003000)

This update was imported from the SUSE:SLE-12:Update update project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1002991"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1002995"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1002998"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1003000"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1003002"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1003012"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1003017"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1003023"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected X Window System client libraries packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-6-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-6-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-6-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-xcb1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-xcb1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-xcb1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libX11-xcb1-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes3-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXfixes3-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi6-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi6-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXi6-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr2-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrandr2-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXrender1-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst6-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst6-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXtst6-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXv1-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libXvMC1-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:42.1");

  script_set_attribute(attribute:"patch_publication_date", value:"2016/10/23");
  script_set_attribute(attribute:"plugin_publication_date", value:"2016/10/24");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE42\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "42.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE42.1", reference:"libX11-6-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-6-debuginfo-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-data-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-debugsource-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-devel-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-xcb1-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libX11-xcb1-debuginfo-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXfixes-debugsource-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXfixes-devel-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXfixes3-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXfixes3-debuginfo-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXi-debugsource-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXi-devel-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXi6-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXi6-debuginfo-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrandr-debugsource-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrandr-devel-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrandr2-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrandr2-debuginfo-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrender-debugsource-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrender-devel-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrender1-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXrender1-debuginfo-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXtst-debugsource-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXtst-devel-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXtst6-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXtst6-debuginfo-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXv-debugsource-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXv-devel-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXv1-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXv1-debuginfo-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXvMC-debugsource-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXvMC-devel-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXvMC1-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libXvMC1-debuginfo-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libX11-6-32bit-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libX11-6-debuginfo-32bit-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libX11-devel-32bit-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libX11-xcb1-32bit-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libX11-xcb1-debuginfo-32bit-1.6.3-6.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXfixes-devel-32bit-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXfixes3-32bit-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXfixes3-debuginfo-32bit-5.0.1-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXi-devel-32bit-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXi6-32bit-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXi6-debuginfo-32bit-1.7.5-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrandr-devel-32bit-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrandr2-32bit-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrandr2-debuginfo-32bit-1.5.0-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrender-devel-32bit-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrender1-32bit-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXrender1-debuginfo-32bit-0.9.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXtst-devel-32bit-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXtst6-32bit-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXtst6-debuginfo-32bit-1.2.2-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXv-devel-32bit-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXv1-32bit-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXv1-debuginfo-32bit-1.0.10-7.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXvMC-devel-32bit-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXvMC1-32bit-1.0.9-3.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libXvMC1-debuginfo-32bit-1.0.9-3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libX11-6 / libX11-6-32bit / libX11-6-debuginfo / etc");
}

References

Related

nessus 71
openvas 40
mageia 1
slackware 1
ibm 2
gentoo 1
debian 5
ubuntucve 9
fedora 16
ubuntu 4
osv 9
prion 8
cve 8
alpinelinux 4
nvd 5
debiancve 6
redhatcve 6
cvelist 3
nessus
nessus
SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2828-1)
2016-11-17 00:00:00
SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2505-1)
2016-10-13 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : x11 (SSA:2016-305-02)
2016-11-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:2505-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2828-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2018-0011)
2022-01-28 00:00:00
mageia
mageia
Updated X11 client libraries packages fix security vulnerability
2018-01-01 18:50:28
slackware
slackware
[slackware-security] x11
2016-11-01 03:40:24
ibm
ibm
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in X.Org libs
2019-01-31 02:25:02
Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in X.Org libXrender (CVE-2016-7949 CVE-2016-7950)
2019-01-31 02:25:02
gentoo
gentoo
X.Org: Multiple vulnerabilities
2017-04-10 00:00:00
debian
debian
[SECURITY] [DLA 686-1] libxtst security update
2016-10-26 23:40:25
[SECURITY] [DLA 660-1] libxrandr security update
2016-10-17 19:27:40
[SECURITY] [DLA 685-1] libxi security update
2016-10-26 23:40:17
ubuntucve
ubuntucve
CVE-2016-7952
2016-12-13 00:00:00
CVE-2016-7951
2016-12-13 00:00:00
CVE-2016-7946
2016-12-13 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: libXtst-1.2.3-1.fc25
2016-10-10 17:59:58
[SECURITY] Fedora 24 Update: libXrender-0.9.10-1.fc24
2016-10-09 06:23:29
[SECURITY] Fedora 24 Update: libXtst-1.2.3-1.fc24
2016-10-09 06:23:38
ubuntu
ubuntu
libXrender vulnerabilities
2022-05-23 00:00:00
libXrandr vulnerabilities
2022-05-18 00:00:00
libXi vulnerabilities
2022-09-28 00:00:00
osv
osv
libxrender - security update
2016-10-18 00:00:00
libxrender vulnerabilities
2022-05-23 18:04:37
libxtst - security update
2016-10-26 00:00:00
prion
prion
Out-of-bounds
2016-12-13 20:59:00
Design/Logic Flaw
2016-12-13 20:59:00
Buffer overflow
2016-12-13 20:59:00
cve
cve
CVE-2016-7949
2016-12-13 20:59:15
CVE-2016-7952
2016-12-13 20:59:19
CVE-2016-7953
2016-12-13 20:59:20
alpinelinux
alpinelinux
CVE-2016-7952
2016-12-13 20:59:19
CVE-2016-7951
2016-12-13 20:59:18
CVE-2016-7953
2016-12-13 20:59:20
nvd
nvd
CVE-2016-7951
2016-12-13 20:59:18
CVE-2016-7952
2016-12-13 20:59:19
CVE-2016-7953
2016-12-13 20:59:20
debiancve
debiancve
CVE-2016-7952
2016-12-13 20:59:19
CVE-2016-7953
2016-12-13 20:59:20
CVE-2016-7950
2016-12-13 20:59:16
redhatcve
redhatcve
CVE-2016-7949
2016-10-05 11:47:20
CVE-2016-7952
2016-10-05 11:48:05
CVE-2016-7950
2016-10-05 11:47:43
cvelist
cvelist
CVE-2016-7952
2016-12-13 20:00:00
CVE-2016-7953
2016-12-13 20:00:00
CVE-2016-7951
2016-12-13 20:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.019

Percentile

88.6%

JSON
Related for OPENSUSE-2016-1214.NASL
nessus71openvas40mageia1slackware1ibm2gentoo1debian5ubuntucve9fedora16ubuntu4osv9prion8cve8alpinelinux4nvd5debiancve6redhatcve6cvelist3