Summary
It was discovered that libx11 incorrectly validated certain parameter
lengths. A remote attacker could possibly use this issue to trick libx11
into emitting extra X protocol requests.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libx11 | 2:1.6.4-3ubuntu0.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | libx11 | 2:1.6.9-2ubuntu1.2 |
Vulnerabilities 1
-
Unscored —CVE-2021-31535 EPSS 10%
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. …
References
-
report
https://ubuntu.com/security/CVE-2021-31535