Description
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libxcursor | 1:1.1.15-1 | — |
| Debian 13 | libxcursor | 1:1.1.15-1 | — |
| Debian 12 | libxcursor | 1:1.1.15-1 | — |
| Debian 8 | libxcursor | 1:1.1.14-1+deb8u2 | DLA-1469-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | libxcursor | 1:1.1.14-1ubuntu0.16.04.2 | USN-3729-1 |
| Ubuntu 14.04 LTS | libxcursor | 1:1.1.14-1ubuntu0.14.04.2 | USN-3729-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | egl-utils +2 | 8.3.0-10.el7 | RHSA-2018:3059 |
| RHEL 7 | freeglut +1 | 3.0.0-8.el7 | RHSA-2018:3059 |
| RHEL 7 | intel-gpu-tools +2 | 2.99.917-28.20180530.el7 | RHSA-2018:3059 |
| RHEL 7 | libX11 +2 | 1.6.5-2.el7 | RHSA-2018:3059 |
| RHEL 7 | libXcursor +1 | 1.1.15-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libXfont +1 | 1.5.4-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libXfont2 +1 | 2.0.3-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libXres +1 | 1.2.0-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libdrm +2 | 2.4.91-3.el7 | RHSA-2018:3059 |
| RHEL 7 | libepoxy +1 | 1.5.2-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libglvnd +6 | 1:1.0.1-0.8.git5baa1e5.el7 | RHSA-2018:3059 |
| RHEL 7 | libinput +1 | 1.10.7-2.el7 | RHSA-2018:3059 |
| RHEL 7 | libwacom +2 | 0.30-1.el7 | RHSA-2018:3059 |
| RHEL 7 | libxcb +3 | 1.13-1.el7 | RHSA-2018:3059 |
| RHEL 7 | mesa +19 | 18.0.5-3.el7 | RHSA-2018:3059 |
| RHEL 7 | tigervnc +6 | 1.8.0-13.el7 | RHSA-2018:3059 |
| RHEL 7 | vulkan +2 | 1.1.73.0-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xkeyboard-config +1 | 2.24-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-ati | 18.0.1-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-dummy | 0.3.7-1.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-evdev +1 | 2.10.6-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-fbdev | 0.5.0-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-libinput +1 | 0.27.1-2.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-mouse +1 | 1.9.2-2.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-nouveau | 1:1.0.15-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-openchrome +1 | 0.5.0-3.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-qxl +1 | 0.1.5-4.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-synaptics +1 | 1.9.0-2.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-v4l | 0.2.0-49.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-vesa | 2.4.0-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-vmmouse | 13.1.0-1.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-vmware | 13.2.1-1.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-void | 1.4.1-2.el7.1 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-drv-wacom +1 | 0.36.1-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-font-utils | 1:7.5-21.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-proto-devel | 2018.4-1.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-server +9 | 1.20.1-3.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-utils | 7.5-23.el7 | RHSA-2018:3059 |
| RHEL 7 | xorg-x11-xkb-utils +2 | 7.7-14.el7 | RHSA-2018:3059 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | libXcursor | 1.1.14-4.6.1 | SUSE-SU-2018:2841-1 |
| SLES 11 SP4 | xorg-x11-libs | 7.4-8.26.50.8.1 | SUSE-SU-2018:2791-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | libXcursor | 1.1.14-4.6.1 | SUSE-SU-2018:2841-1 |
| SLES for SAP 11 SP4 | xorg-x11-libs | 7.4-8.26.50.8.1 | SUSE-SU-2018:2791-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | libXcursor +1 | 1.1.15-1.amzn2 | ALAS2-2019-1173 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | egl-utils +2 | 8.3.0-10.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | freeglut +1 | 3.0.0-8.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | intel-gpu-tools +2 | 2.99.917-28.20180530.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libX11 +2 | 1.6.5-2.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libXcursor +1 | 1.1.15-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libXfont +1 | 1.5.4-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libXfont2 +1 | 2.0.3-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libXres +1 | 1.2.0-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libdrm +2 | 2.4.91-3.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libepoxy +1 | 1.5.2-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libglvnd +6 | 1:1.0.1-0.8.git5baa1e5.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libinput +1 | 1.10.7-2.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libwacom +2 | 0.30-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | libxcb +3 | 1.13-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | mesa-libGL +18 | 18.0.5-3.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | tigervnc +6 | 1.8.0-13.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | vulkan +2 | 1.1.73.0-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xkeyboard-config +1 | 2.24-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-ati | 18.0.1-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-dummy | 0.3.7-1.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-evdev +1 | 2.10.6-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-fbdev | 0.5.0-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-libinput +1 | 0.27.1-2.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-mouse +1 | 1.9.2-2.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-nouveau | 1:1.0.15-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-openchrome +1 | 0.5.0-3.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-qxl +1 | 0.1.5-4.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-synaptics +1 | 1.9.0-2.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-v4l | 0.2.0-49.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-vesa | 2.4.0-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-vmmouse | 13.1.0-1.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-vmware | 13.2.1-1.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-void | 1.4.1-2.el7.1 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-drv-wacom +1 | 0.36.1-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-font-utils | 1:7.5-21.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-proto-devel | 2018.4-1.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-server-Xdmx +8 | 1.20.1-3.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-utils | 7.5-23.el7 | ELSA-2018-3059 |
| Oracle Linux 7 | xorg-x11-xkb-utils +2 | 7.7-14.el7 | ELSA-2018-3059 |
Advisories 8
- RHSA-2018:3059 Red Hat Security Advisory: X.org X11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- USN-3729-1 libxcursor vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-1469-1 libxcursor - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2018:2841-1 Security update for libXcursor SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2791-1 Security update for xorg-x11-libs SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- ALAS2-2019-1173 Low: libXcursor security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 8, 2019
- ELSA-2018-3059 Low: X.org X11 security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 5, 2018
References
- RHSA-2018:3059 vendor-advisory
- https://cgit.freedesktop.org/xorg/lib/libXcursor/commit/?id=897213f36baf6926daf6d192c709cf627aa5fd05
- USN-3729-1 vendor-advisory
- RHSA-2018:3505 vendor-advisory
- [debian-lts-announce] 20180818 [SECURITY] [DLA-1469-1] libxcursor security update mailing-list
- https://bugs.freedesktop.org/show_bug.cgi?id=90857