Most recent entries from all

ALSA-2021:4326 — Moderate: libX11 security update

Affected: AlmaLinux:8: libX11, AlmaLinux:8: libX11-common, AlmaLinux:8: libX11-devel, AlmaLinux:8: libX11-xcb

The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: missing request length checks (CVE-2021-31535)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-02747

Withdrawn: BELL-CVE-2021-31535 — CVE-2021-31535 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-850 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Elles permettent à un attaquant de provoquer un déni d…

certfr-2021-avi-850

EUVD-2026-27509

fkie_cve-2021-31535

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.

GHSA-3vp2-rf63-rc8p

gsd-2021-31535

OESA-2021-1235 — libX11 security update

Affected: openEuler:20.03-LTS-SP1: libX11

Core X11 protocol client library. Security Fix(es): LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.(CVE-2021-31535)

openSUSE-SU-2021:0807-1 — Security update for libX11

Security update for libX11

RHBA-2021:3472 — Red Hat Bug Fix Advisory: Red Hat Ansible Tower 3.8.4-1 - Container

nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name libX11: missing request length checks postgresql: Buffer overrun from integer overflow in array subscripting calculations postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE

SUSE-SU-2021:14748-1 — Security update for xorg-x11-libX11

Security update for xorg-x11-libX11

UBUNTU-CVE-2021-31535

Affected: Ubuntu:Pro:14.04:LTS: libx11, Ubuntu:Pro:16.04:LTS: libx11, Ubuntu:18.04:LTS: libx11, Ubuntu:20.04:LTS: libx11

WID-SEC-W-2023-0063 — Juniper Junos Space: Mehrere Schwachstellen

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.