The version of libX11 installed on the remote host is prior to 1.8.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-276-01 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3963-1 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3602 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3602-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     October 05, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libx11     Version        : 2:1.6.7-1+deb10u4     CVE ID         : CVE-2023-43785 CVE-2023-43786 CVE-2023-43787

    Several vulnerabilities were found in libx11, the X11 client-side     library.

    CVE-2023-43785

        Gregory James Duck discovered an out of bounds memory access in
        _XkbReadKeySyms, which could result in denial of service.

    CVE-2023-43786

        Yair Mizrahi found an infinite recursion in PutSubImage when         parsing a crafted file, which would result in stack exhaustion         and denial of service.

    CVE-2023-43787

        Yair Mizrahi discovered an integer overflow in XCreateImage         when parsing crafted input, which would result in a small buffer         allocation leading into a buffer overflow. This could result         in denial of service or potentially in arbitrary code execution.

    For Debian 10 buster, these problems have been fixed in version     2:1.6.7-1+deb10u4.

    We recommend that you upgrade your libx11 packages.

    For the detailed security status of libx11 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libx11

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3603 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3603-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     October 05, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libxpm     Version        : 1:3.5.12-1+deb10u2     CVE ID         : CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789

    Several vulnerabilities were found in libXpm, the X Pixmap (XPM) image     library.

    CVE-2023-43786

        Yair Mizrahi discovered an infinite recursion issue when parsing         crafted XPM files, which would result in denial of service.

    CVE-2023-43787

        Yair Mizrahi discovered a buffer overflow vulnerability in libX11         when parsing crafted XPM files, which could result in denial of         service or potentially the execution of arbitrary code.

    CVE-2023-43788

        Alan Coopersmith found an out of bounds read in         XpmCreateXpmImageFromBuffer, which could result in denial of         service when parsing crafted XPM files.

    CVE-2023-43789

        Alan Coopersmith discovered an out of bounds read issue when         parsing corrupted colormaps, which could lead to denial of         service when parsing crafted XPM files.

    For Debian 10 buster, these problems have been fixed in version     1:3.5.12-1+deb10u2.

    We recommend that you upgrade your libxpm packages.

    For the detailed security status of libxpm please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libxpm

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6407-2 advisory.

    USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for     Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c4cf6646b9 advisory.

    libXpm 3.5.17, fixes CVE-2023-43788, CVE-2023-43789, CVE-2023-43786

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6408-2 advisory.

    USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for     Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system. (CVE-2023-43785)

  - A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.
    (CVE-2023-43786)

  - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges. (CVE-2023-43787)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libX11 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.
    This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on     the system. (CVE-2023-43785)

  - A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw     allows a local user to consume all available system resources and cause a denial of service condition.
    (CVE-2023-43786)

  - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This     flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated     privileges. (CVE-2023-43787)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8020:02 advisory.

    * libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)
      * libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)
      * libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
182466	Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libX11 Multiple Vulnerabilities (SSA:2023-276-01)	Nessus	Slackware Local Security Checks	10/3/2023	10/16/2023	high
182570	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libX11 (SUSE-SU-2023:3963-1)	Nessus	SuSE Local Security Checks	10/5/2023	10/16/2023	high
182584	Debian dla-3602 : libx11-6 - security update	Nessus	Debian Local Security Checks	10/5/2023	1/22/2025	high
182585	Debian dla-3603 : libxpm-dev - security update	Nessus	Debian Local Security Checks	10/5/2023	1/22/2025	high
182843	Ubuntu 16.04 ESM / 18.04 ESM : libx11 vulnerabilities (USN-6407-2)	Nessus	Ubuntu Local Security Checks	10/10/2023	10/29/2024	high
185296	Fedora 39 : libXpm (2023-c4cf6646b9)	Nessus	Fedora Local Security Checks	11/7/2023	11/14/2024	medium
183750	Ubuntu 16.04 ESM / 18.04 ESM : libXpm vulnerabilities (USN-6408-2)	Nessus	Ubuntu Local Security Checks	10/23/2023	10/29/2024	high
188838	EulerOS 2.0 SP9 : libX11 (EulerOS-SA-2023-3342)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
188901	EulerOS 2.0 SP11 : libX11 (EulerOS-SA-2023-3249)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
188942	EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1089)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
189044	EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1065)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
189058	EulerOS Virtualization 2.9.0 : libX11 (EulerOS-SA-2024-1015)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	high
291942	MiracleLinux 9 : libX11-1.7.0-9.el9 (AXSA:2024-8020:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

medium

high

high

high

high

high

high

high