PT-2016-7439 · X.Org+3 · Libxi+3

Tobias Stoeckmann · Publicado 2016-10-12 · Atualizado 2022-09-28 · CVE-2016-7946

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions X.org libXi versions prior to 1.7.7

Description The issue allows remote X servers to cause a denial of service, resulting in an infinite loop. This is achieved through vectors involving length fields.

Recommendations For versions prior to 1.7.7, update to version 1.7.7 or later to resolve the issue.

Correção

DoS

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2018-1028

CVE-2016-7946

DLA-685-1

MGASA-2018-0011

SUSE-SU-2016:2505-1

SUSE-SU-2016:2828-1

SUSE-SU-2016:3047-1

SUSE-SU-2016:3189-1

USN-5646-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Libxi

Referências · 56

• https://advisories.mageia.org/MGASA-2018-0011.html · Nota de Segurança
• https://bugzilla.suse.com/1003023 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20162505-1 · Nota
• https://suse.com/security/cve/CVE-2016-7947 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20163047-1 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2016-7946 · Nota
• https://errata.altlinux.org/ALT-PU-2018-1028 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7946 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7946 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2016:2828-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-7945 · Nota
• https://security.gentoo.org/glsa/201704-03 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-7953 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVTZ2XLPKLASQUIQA2GMKKAUOQIUMM7I · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7945 · Nota de Segurança