Lucene search

K
ubuntuUbuntuUSN-6168-1
HistoryJun 15, 2023 - 12:00 a.m.

libx11 vulnerability

2023-06-1500:00:00
ubuntu.com
37
ubuntu
libx11
vulnerability
denial of service
x server
remote attacker
crash

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

41.5%

Releases

  • Ubuntu 23.04
  • Ubuntu 22.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • libx11 - X11 client-side library

Details

Gregory James Duck discovered that libx11 incorrectly handled certain
Request, Event, or Error IDs. If a user were tricked into connecting to a
malicious X Server, a remote attacker could possibly use this issue to
cause libx11 to crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchlibx11-6< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-6-dbgsym< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-data< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-dev< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-doc< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-xcb-dev< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-xcb1< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu23.04noarchlibx11-xcb1-dbgsym< 2:1.8.4-2ubuntu0.2UNKNOWN
Ubuntu22.10noarchlibx11-6< 2:1.8.1-2ubuntu0.2UNKNOWN
Ubuntu22.10noarchlibx11-6-dbgsym< 2:1.8.1-2ubuntu0.2UNKNOWN
Rows per page:
1-10 of 331

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

41.5%