Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting to a malicious X server, a remote attacker could use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-43785)
Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-43786)
Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could use this issue to cause libx11 to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-43787)
{ "availability": "No subscription required", "binaries": [ { "libx11-6-udeb": "2:1.6.9-2ubuntu1.6", "libx11-6-dbgsym": "2:1.6.9-2ubuntu1.6", "libx11-dev": "2:1.6.9-2ubuntu1.6", "libx11-xcb1-dbgsym": "2:1.6.9-2ubuntu1.6", "libx11-6": "2:1.6.9-2ubuntu1.6", "libx11-xcb-dev": "2:1.6.9-2ubuntu1.6", "libx11-xcb1": "2:1.6.9-2ubuntu1.6", "libx11-doc": "2:1.6.9-2ubuntu1.6", "libx11-data": "2:1.6.9-2ubuntu1.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "libx11-6-dbgsym": "2:1.7.5-1ubuntu0.3", "libx11-dev": "2:1.7.5-1ubuntu0.3", "libx11-xcb1-dbgsym": "2:1.7.5-1ubuntu0.3", "libx11-6": "2:1.7.5-1ubuntu0.3", "libx11-xcb-dev": "2:1.7.5-1ubuntu0.3", "libx11-xcb1": "2:1.7.5-1ubuntu0.3", "libx11-doc": "2:1.7.5-1ubuntu0.3", "libx11-data": "2:1.7.5-1ubuntu0.3" } ] }