Detections
Analytics
Alpine: multiple libx11 packages: security update to 1.8.6-r0 (deprecated)
high Tenable Cloud Security Plugin ID 401378
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on
the system. (CVE-2023-43785)
- A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw
allows a local user to consume all available system resources and cause a denial of service condition.
(CVE-2023-43786)
- A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This
flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated
privileges. (CVE-2023-43787)
See Also
https://git.alpinelinux.org/aports/commit/?id=5bb2c98b8c37b0e5224802a6a2ea8e3d5f92153c
https://git.alpinelinux.org/aports/commit/?id=d0759a9942dd93aa7e3b47f133766cfe903711fe
Plugin Details
Severity: High
ID: 401378
Version: Revision 1.37
Type: Local
Published: 10/5/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.58
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2023-43787
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/5/2023
Vulnerability Publication Date: 10/5/2023