X.Org X11: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 7.8
  CVE-2023-43787

  Libx11: integer overflow in xcreateimage() leading to a heap overflow

  A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 10, 2023
• Medium 6.5
  CVE-2023-43785

  Libx11: out-of-bounds memory access in _xkbreadkeysyms()

  A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 10, 2023
• Medium 5.5
  CVE-2023-43786 Public exploit

  Libx11: stack exhaustion from infinite recursion in putsubimage()

  A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 10, 2023
• Medium 5.5
  CVE-2023-43788

  Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

  A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 10, 2023
• Medium 5.5
  CVE-2023-43789

  Libxpm: out of bounds read on xpm with corrupted colormap

  A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 12, 2023

Revision history

1. 2025-05-07 #21

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2024-08-19 #20

   Neue Updates von SUSE aufgenommen

3. 2024-08-06 #19

   Neue Updates von Gentoo aufgenommen

4. 2024-07-07 #18

   Neue Updates von Gentoo aufgenommen

5. 2024-05-21 #17

   Neue Updates von Red Hat aufgenommen

6. 2024-05-01 #16

   Neue Updates von Red Hat aufgenommen

7. 2024-04-29 #15

   Neue Updates von Red Hat aufgenommen

8. 2024-02-04 #14

   Neue Updates von IBM aufgenommen

9. 2024-01-09 #13

   Neue Updates von Amazon aufgenommen

10. 2023-12-05 #12

    Neue Updates von Amazon aufgenommen

11. 2023-12-04 #11

    Neue Updates von Amazon aufgenommen

12. 2023-11-27 #10

    Neue Updates von Fedora aufgenommen

13. 2023-11-05 #9

    Neue Updates von Amazon aufgenommen

14. 2023-10-24 #8

    Neue Updates von Amazon aufgenommen

15. 2023-10-23 #7

    Neue Updates von Ubuntu aufgenommen

16. 2023-10-19 #6

    Neue Updates von Amazon aufgenommen

17. 2023-10-10 #5

    Neue Updates von Ubuntu aufgenommen

18. 2023-10-08 #4

    Neue Updates von IGEL aufgenommen

19. 2023-10-05 #3

    Neue Updates von SUSE und Debian aufgenommen

20. 2023-10-04 #2

    Neue Updates von Fedora aufgenommen

21. 2023-10-03 #1

    Initiale Fassung

References

• Eintrag in der OSS-Mailing-List vom 2023-10-03
  https://seclists.org/oss-sec/2023/q4/17
• SUSE Security Update SUSE-SU-2023:3965-1 vom 2023-10-04
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016502.html
• SUSE Security Update SUSE-SU-2023:3963-1 vom 2023-10-04
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016503.html
• SUSE Security Update SUSE-SU-2023:3962-1 vom 2023-10-04
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016504.html
• Fedora Security Advisory FEDORA-2023-C4CF6646B9 vom 2023-10-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c4cf6646b9
• Debian Security Advisory DLA-3602 vom 2023-10-05
  https://lists.debian.org/debian-lts-announce/2023/10/msg00004.html
• SUSE Security Update SUSE-SU-2023:3989-1 vom 2023-10-05
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016555.html
• Debian Security Advisory DSA-5516 vom 2023-10-05
  https://lists.debian.org/debian-security-announce/2023/msg00209.html
• Debian Security Advisory DLA-3603 vom 2023-10-05
  https://lists.debian.org/debian-lts-announce/2023/10/msg00005.html
• Debian Security Advisory DSA-5517 vom 2023-10-05
  https://lists.debian.org/debian-security-announce/2023/msg00210.html
• IGEL Security Notice ISN-2023-22 vom 2023-10-06
  https://kb.igel.com/securitysafety/en/isn-2023-22-multiple-x11-vulnerabilites-101064431.html
• Ubuntu Security Notice USN-6407-2 vom 2023-10-10
  https://ubuntu.com/security/notices/USN-6407-2
• Fedora Security Advisory FEDORA-2023-591B7F5047 vom 2023-10-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-591b7f5047
• Amazon Linux Security Advisory ALAS2-2023-2295 vom 2023-10-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2295.html
• Amazon Linux Security Advisory ALAS2-2023-2296 vom 2023-10-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2296.html
• Ubuntu Security Notice USN-6408-2 vom 2023-10-23
  https://ubuntu.com/security/notices/USN-6408-2
• Amazon Linux Security Advisory ALAS-2023-1859 vom 2023-10-25
  https://alas.aws.amazon.com/ALAS-2023-1859.html
• Amazon Linux Security Advisory ALAS-2023-1875 vom 2023-11-04
  https://alas.aws.amazon.com/ALAS-2023-1875.html
• Fedora Security Advisory FEDORA-2023-25329C196B vom 2023-11-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-25329c196b
• Fedora Security Advisory FEDORA-2023-BA2E60E743 vom 2023-11-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-ba2e60e743
• Fedora Security Advisory FEDORA-2023-E1C7FAE02E vom 2023-11-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-e1c7fae02e
• Amazon Linux Security Advisory ALAS-2023-2356 vom 2023-12-05
  https://alas.aws.amazon.com/AL2/ALAS-2023-2356.html
• Amazon Linux Security Advisory ALAS-2023-1895 vom 2023-12-06
  https://alas.aws.amazon.com/ALAS-2023-1895.html
• Amazon Linux Security Advisory ALAS-2023-1894 vom 2023-12-06
  https://alas.aws.amazon.com/ALAS-2023-1894.html
• Amazon Linux Security Advisory ALAS-2024-2389 vom 2024-01-10
  https://alas.aws.amazon.com/AL2/ALAS-2024-2389.html
• IBM Security Bulletin 7114471 vom 2024-02-02
  https://www.ibm.com/support/pages/node/7114471
• Red Hat Security Advisory RHSA-2024:2146 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2146
• Red Hat Security Advisory RHSA-2024:2217 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2217
• Red Hat Security Advisory RHSA-2024:2145 vom 2024-04-30
  https://access.redhat.com/errata/RHSA-2024:2145
• Red Hat Security Advisory RHSA-2024:3022 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:3022
• Red Hat Security Advisory RHSA-2024:2974 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2974
• Red Hat Security Advisory RHSA-2024:2973 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:2973
• Gentoo Linux Security Advisory GLSA-202407-21 vom 2024-07-06
  https://security.gentoo.org/glsa/202407-21
• Gentoo Linux Security Advisory GLSA-202408-03 vom 2024-08-07
  https://security.gentoo.org/glsa/202408-03
• SUSE Security Update SUSE-SU-2024:2453-1 vom 2024-08-19
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019224.html
• Rocky Linux Security Advisory RLSA-2024:2146 vom 2025-05-07
  https://errata.build.resf.org/RLSA-2024:2146
• Rocky Linux Security Advisory RLSA-2024:2145 vom 2025-05-07
  https://errata.build.resf.org/RLSA-2024:2145