PT-2016-7445 · X.Org+2 · Libxtst+2

Tobias Stoeckmann

·

Publicado

2016-10-12

·

Atualizado

2020-11-23

·

CVE-2016-7952

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions X.org libXtst versions prior to 1.2.3
Description The issue allows remote X servers to cause a denial of service, resulting in an infinite loop. This can be triggered via a reply in certain categories without a client sequence and with attached data, specifically the XRecordStartOfData, XRecordEndOfData, or XRecordClientDied categories.
Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to remote X servers to minimize the risk of exploitation.

Correção

DoS

RCE

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-284

Identificadores relacionados

ALT-PU-2020-3326
ALT-PU-2020-3330
ALT-PU-2020-3399
CVE-2016-7952
DLA-686-1
MGASA-2018-0011
SUSE-SU-2016:2505-1
SUSE-SU-2016:2828-1
SUSE-SU-2016:3189-1

Produtos afetados

Alt Linux
Suse
Libxtst