Out-of-Bounds Write Vulnerability in libX11 Affected by X.Org
CVE-2018-14600

9.8CRITICAL

Key Information:

Vendor

X.org

Status
Libx11
Vendor
CVE Published:
24 August 2018

What is CVE-2018-14600?

A vulnerability in libX11 has been identified, wherein the XListExtensions function processes a variable as signed rather than unsigned. This misinterpretation can lead to an out-of-bounds write of up to 128 bytes. Consequently, this may allow attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It is imperative for users of affected versions to implement the latest patches to safeguard their systems against potential exploitation and ensure continued operational integrity.

References

https://usn.ubuntu.com/3758-2/
vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/201811-01
vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/105177
vdb-entryx_refsource_BID

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.