This update for libX11 fixes the following issues :

  - Fixed XIM client heap overflows (CVE-2020-14344,     bsc#1174628)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libX11 fixes the following issues :

Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The X.org project reports :

The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method.

Todd Carson discovered some integer overflows in libX11, which could lead to heap corruption when processing crafted messages from an input method.

For Debian 9 stretch, this problem has been fixed in version 2:1.6.4-3+deb9u2.

We recommend that you upgrade your libx11 packages.

For the detailed security status of libx11 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libx11

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libX11 fixes the following issues :

Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libX11 fixes the following issues :

  - Fixed XIM client heap overflows (CVE-2020-14344,     bsc#1174628).

This update was imported from the SUSE:SLE-15:Update update project.

libX11 1.6.12 (CVE-2020-14363, CVE 2020-14344)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libX11 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow leading to a heap-buffer overflow     was found in The X Input Method (XIM) client was     implemented in libX11 before version 1.6.10. As per     upstream this is security relevant when setuid programs     call XIM client functions while running with elevated     privileges. No such programs are shipped with Red Hat     Enterprise Linux.(CVE-2020-14344)

  - An integer overflow vulnerability leading to a     double-free was found in libX11. This flaw allows a     local privileged attacker to cause an application     compiled with libX11 to crash, or in some cases, result     in arbitrary code execution. The highest threat from     this flaw is to confidentiality, integrity as well as     system availability.(CVE-2020-14363)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libX11 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow vulnerability leading to a     double-free was found in libX11. This flaw allows a     local privileged attacker to cause an application     compiled with libX11 to crash, or in some cases, result     in arbitrary code execution. The highest threat from     this flaw is to confidentiality, integrity as well as     system availability.(CVE-2020-14363)

  - An integer overflow leading to a heap-buffer overflow     was found in The X Input Method (XIM) client was     implemented in libX11 before version 1.6.10. As per     upstream this is security relevant when setuid programs     call XIM client functions while running with elevated     privileges. No such programs are shipped with Red Hat     Enterprise Linux.(CVE-2020-14344)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202008-18 (X.Org X11 library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.org X11 library.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14344) Jayden Rivers discovered that libx11 incorrectly handled locales. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14363).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow vulnerability leading to a     double-free was found in libX11. This flaw allows a     local privileged attacker to cause an application     compiled with libX11 to crash, or in some cases, result     in arbitrary code execution. The highest threat from     this flaw is to confidentiality, integrity as well as     system availability.(CVE-2020-14363)

  - An integer overflow leading to a heap-buffer overflow     was found in The X Input Method (XIM) client was     implemented in libX11 before version 1.6.10. As per     upstream this is security relevant when setuid programs     call XIM client functions while running with elevated     privileges. No such programs are shipped with Red Hat     Enterprise Linux.(CVE-2020-14344)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
139446	openSUSE Security Update : libX11 (openSUSE-2020-1162)	Nessus	SuSE Local Security Checks	2020/08/10	2020/08/12	medium
139533	SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2196-1)	Nessus	SuSE Local Security Checks	2020/08/12	2021/01/13	medium
139534	SUSE SLED15 / SLES15 Security Update : libX11 (SUSE-SU-2020:2197-1)	Nessus	SuSE Local Security Checks	2020/08/12	2020/11/30	medium
139267	FreeBSD : libX11 -- Heap corruption in the X input method client in libX11 (6faa7feb-d3fa-11ea-9aba-0c9d925bbbc0)	Nessus	FreeBSD Local Security Checks	2020/08/03	2020/08/10	medium
139340	Debian DLA-2312-1 : libx11 security update	Nessus	Debian Local Security Checks	2020/08/06	2020/08/11	medium
139358	SUSE SLED15 / SLES15 Security Update : libX11 (SUSE-SU-2020:2116-1)	Nessus	SuSE Local Security Checks	2020/08/06	2021/01/13	medium
139644	openSUSE Security Update : libX11 (openSUSE-2020-1198)	Nessus	SuSE Local Security Checks	2020/08/18	2020/08/20	medium
139559	openSUSE Security Update : libX11 (openSUSE-2020-1182)	Nessus	SuSE Local Security Checks	2020/08/13	2020/08/18	medium
139359	SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2117-1)	Nessus	SuSE Local Security Checks	2020/08/06	2021/01/13	medium
139447	openSUSE Security Update : libX11 (openSUSE-2020-1164)	Nessus	SuSE Local Security Checks	2020/08/10	2020/08/12	medium
139933	Fedora 32 : libX11 (2020-eba554b9d5)	Nessus	Fedora Local Security Checks	2020/08/28	2020/09/21	medium
142177	EulerOS 2.0 SP8 : libX11 (EulerOS-SA-2020-2313)	Nessus	Huawei Local Security Checks	2020/11/02	2021/01/06	medium
144719	EulerOS Virtualization for ARM 64 3.0.2.0 : libX11 (EulerOS-SA-2021-1049)	Nessus	Huawei Local Security Checks	2021/01/05	2021/01/11	medium
145113	EulerOS 2.0 SP3 : libX11 (EulerOS-SA-2021-1092)	Nessus	Huawei Local Security Checks	2021/01/20	2021/01/22	medium
139937	GLSA-202008-18 : X.Org X11 library: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/08/28	2020/09/21	medium
140266	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 : libx11 vulnerabilities (USN-4487-1)	Nessus	Ubuntu Local Security Checks	2020/09/04	2020/09/30	medium
141327	EulerOS : libX11 (EulerOS-SA-2020-2177)	Nessus	Huawei Local Security Checks	2020/10/09	2021/01/06	medium
140507	Fedora 31 : libX11 (2020-9a0b272cc1)	Nessus	Fedora Local Security Checks	2020/09/11	2020/09/30	medium
141320	EulerOS 2.0 SP9 : libX11 (EulerOS-SA-2020-2167)	Nessus	Huawei Local Security Checks	2020/10/09	2021/01/06	medium

Plugins Search