Detections
Analytics
Alpine: multiple libx11 packages: security update to 1.8.7-r0
high Tenable Self-Hosted Container Security Plugin ID 424077
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on
the system. (CVE-2023-43785)
- A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw
allows a local user to consume all available system resources and cause a denial of service condition.
(CVE-2023-43786)
- A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This
flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated
privileges. (CVE-2023-43787)
See Also
https://security.alpinelinux.org/vuln/CVE-2023-43785
Plugin Details
Severity: High
ID: 424077
Version: Revision 1.9
Type: Local
Published: 4/4/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.58
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2023-43787
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 10/4/2023