https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:46:53 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6497 <p><strong>Affected:</strong> AlmaLinux:9: libX11, AlmaLinux:9: libX11-common, AlmaLinux:9: libX11-devel, AlmaLinux:9: libX11-xcb</p> <p>The libX11 packages contain the core X11 protocol client library.</p> <p>Security Fix(es):</p> <p>* libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: libX11, AlmaLinux:9: libX11-common, AlmaLinux:9: libX11-devel, AlmaLinux:9: libX11-xcb</p> <p>The libX11 packages contain the core X11 protocol client library.</p> <p>Security Fix(es):</p> <p>* libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6497 https://cve.radiocsirt.org/vuln/bdu:2023-03596 bdu:2023-03596 https://cve.radiocsirt.org/vuln/bdu:2023-03596 https://cve.radiocsirt.org/vuln/bell-cve-2023-3138 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2023-3138 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/euvd-2026-7065 EUVD-2026-7065 https://cve.radiocsirt.org/vuln/euvd-2026-7065 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3138 <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3138 https://cve.radiocsirt.org/vuln/ghsa-849h-8wj5-xmx8 <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> https://cve.radiocsirt.org/vuln/ghsa-849h-8wj5-xmx8 https://cve.radiocsirt.org/vuln/gsd-2023-3138 gsd-2023-3138 https://cve.radiocsirt.org/vuln/gsd-2023-3138 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3138 msrc_CVE-2023-3138 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3138 https://cve.radiocsirt.org/vuln/oesa-2023-1376 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libX11</p> <p>Core X11 protocol client library.</p> <p>Security Fix(es):</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.(CVE-2023-3138)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libX11</p> <p>Core X11 protocol client library.</p> <p>Security Fix(es):</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.(CVE-2023-3138)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1376 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13008-1 <p>libX11-6-1.8.5-2.1 on GA media</p> <p>libX11-6-1.8.5-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13008-1 https://cve.radiocsirt.org/vuln/rhsa-2024:1088 <p>libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow</p> <p>libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1088 https://cve.radiocsirt.org/vuln/suse-su-2023:2531-1 <p>Security update for libX11</p> <p>Security update for libX11</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2531-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3138 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libx11, Ubuntu:Pro:16.04:LTS: libx11, Ubuntu:Pro:18.04:LTS: libx11, Ubuntu:20.04:LTS: libx11, Ubuntu:22.04:LTS: libx11</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libx11, Ubuntu:Pro:16.04:LTS: libx11, Ubuntu:Pro:18.04:LTS: libx11, Ubuntu:20.04:LTS: libx11, Ubuntu:22.04:LTS: libx11</p> <p>A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3138 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1485 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in X.Org X11 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in X.Org X11 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1485