Summary
Gregory James Duck discovered that libx11 incorrectly handled certain
Request, Event, or Error IDs. If a user were tricked into connecting to a
malicious X Server, a remote attacker could possibly use this issue to
cause libx11 to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libx11 | 2:1.6.9-2ubuntu1.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | libx11 | 2:1.7.5-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not c…
References
-
report
https://ubuntu.com/security/CVE-2023-3138