PT-2016-7440 · X.Org+3 · Libxrandr+3

Tobias Stoeckmann · Publicado 2016-10-12 · Atualizado 2024-06-15 · CVE-2016-7947

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libXrandr versions prior to 1.5.1

Description The issue is related to multiple integer overflows that can be triggered by remote X servers via crafted responses, leading to out-of-bounds write operations.

Recommendations For versions prior to 1.5.1, update to version 1.5.1 or later to resolve the issue.

Correção

Integer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-190

CWE-787

Identificadores relacionados

ALT-PU-2019-1467

CVE-2016-7947

DLA-660-1

MGASA-2018-0011

OPENSUSE-SU-2024:10923-1

SUSE-SU-2016:2505-1

SUSE-SU-2016:2828-1

SUSE-SU-2016:3189-1

USN-5428-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Libxrandr

Referências · 55

• http://openwall.com/lists/oss-security/2016/10/04/4 · Nota
• https://suse.com/security/cve/CVE-2016-7952 · Nota
• https://ubuntu.com/security/notices/USN-5428-1 · Aviso do Fabricante
• http://securitytracker.com/id/1036945 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7947 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2016-7947 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2018-0011.html · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2016-7947 · Nota de Segurança
• https://bugzilla.suse.com/1003023 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20162505-1 · Nota
• https://lists.x.org/archives/xorg-announce/2016-October/002720.html · Nota
• https://suse.com/security/cve/CVE-2016-7949 · Nota
• https://suse.com/security/cve/CVE-2016-7950 · Nota
• https://suse.com/security/cve/CVE-2016-7947 · Nota
• https://osv.dev/vulnerability/CVE-2016-7947 · Aviso do Fabricante