PT-2023-6798 · Libx11+11 · Libx11+11

Dhananjay Arunesh · CVE-2023-43785 · Published 2023-09-18 · Updated 2026-05-07

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions libX11 (affected versions not specified)

Description A vulnerability in the libX11 library is related to a boundary condition within the XkbReadKeySyms() function, allowing a local user to trigger an out-of-bounds read error and read the contents of memory on the system. This issue is associated with reading beyond the valid boundaries of a data buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Infinite Loop

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-835

CWE-125

Related Identifiers

ALSA-2024:2145

ALSA-2024:2973

ALT-PU-2023-6109

ALT-PU-2023-6146

ALT-PU-2023-6468

AZL-31320

BDU:2023-06817

BDU:2023-07664

CESA-2024_2973

CVE-2023-43785

DLA-3602-1

DSA-5517-1

INFSA-2024_2145

INFSA-2024_2973

JLSEC-2026-473

MGASA-2023-0287

OESA-2023-1708

OPENSUSE-SU-2023_3963-1

OPENSUSE-SU-2024:13296-1

RHSA-2024:2145

RHSA-2024:2973

RHSA-2024_2145

RHSA-2024_2973

SUSE-SU-2023:3963-1

SUSE-SU-2023:3989-1

SUSE-SU-2023_3963-1

SUSE-SU-2023_3989-1

SUSE-SU-2024:2453-1

USN-6407-1

USN-6407-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Zvirt Node

Libx11

References · 92

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43785.json · Exploit
• https://osv.dev/vulnerability/ALSA-2024:2145 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6407-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2973.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6407-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07664 · Security Note
• https://ubuntu.com/security/CVE-2023-43785 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2453-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2973 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2145 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0287 · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-473 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6407-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43787 · Security Note