X.Org X11: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 10

• Unscored —
  CVE-2018-15853

  Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local att…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15854

  Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15855

  Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15856

  An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 c…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15857

  An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local at…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15859

  Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 c…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15861

  Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attac…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15862

  Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attack…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15863

  Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by…

  libxkbcommon libxkbcommon xkbcomp x11-xkb-utils Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15864

  Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local att…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018

Revision history

1. 2026-02-03 #9

   Neue Updates von SUSE aufgenommen

2. 2025-12-17 #8

   Neue Updates von SUSE aufgenommen

3. 2025-12-15 #7

   Neue Updates von SUSE aufgenommen

4. 2025-12-14 #6

   Neue Updates von openSUSE aufgenommen

5. 2025-12-02 #5

   Neue Updates von Fedora aufgenommen

6. 2024-01-07 #4

   Neue Updates von SUSE aufgenommen

7. 2020-02-05 #3

   Neue Updates von CentOS aufgenommen

8. 2019-08-07 #2

   Korrektur: Angriff nur lokal bzgl. gemeldeter CVE

9. 2019-08-06 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2019:2079 vom 2019-08-06
  https://access.redhat.com/errata/RHSA-2019:2079
• CentOS Security Advisory CESA-2019:2079 vom 2020-02-06
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-2079-Moderate-CentOS-7-xorg-x11-drv-ati-Security-Update-tp4645838.html
• SUSE Security Update SUSE-SU-2024:0037-1 vom 2024-01-05
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017591.html
• Fedora Security Advisory FEDORA-2025-3A9B79CA0E vom 2025-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-3a9b79ca0e
• Fedora Security Advisory FEDORA-2025-E110B32AC7 vom 2025-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-e110b32ac7
• openSUSE Security Update OPENSUSE-SU-2025:15815-1 vom 2025-12-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EHMZ2NY535D3T3H5ATVQ3IZOEXYV22ZI/
• SUSE Security Update SUSE-SU-2025:4407-1 vom 2025-12-16
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023553.html
• SUSE Security Update SUSE-SU-2025:4426-1 vom 2025-12-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023569.html
• SUSE Security Update SUSE-SU-2026:20186-1 vom 2026-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024030.html