9.3

CVE-2011-0465: matthias_hopf xrdb Improper Input Validation

CVSS: 9.3v2.0HighModified
AliasesRHSA-2011:0432RHSA-2011:0433DEBIAN-CVE-2011-0465
Published 08-04-2011Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2011-0465 is a high (CVSS 9.3) Improper Input Validation vulnerability in matthias_hopf xrdb. EPSS estimates a 5.78% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.3/10
010
High · v2.0 (NVD)
EPSS score
5.78%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Duplicates 1
CVE-2011-1014

Timeline

  1. 08-04-2011
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

5.78%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.78% on 19-09-2026

19-09-202619-10-2026
EPSS score
5.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat20 products
  • xorg-x11< 0:6.8.2-1.EL.67
  • xorg-x11-deprecated-libs< 0:6.8.2-1.EL.67
  • xorg-x11-deprecated-libs-devel< 0:6.8.2-1.EL.67
  • xorg-x11-devel< 0:6.8.2-1.EL.67
  • xorg-x11-doc< 0:6.8.2-1.EL.67
Debian1 product
  • x11-xserver-utils< 7.6+2 | < 7.5+3 | < 7.3+6
Matthias_hopf1 product
  • xrdb≤ 1.0.8 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7
X1 product
  • x11≤ r7.6 | r1 | r2 | r3 | r4 | r5 | r6 | r6.1 | r6.3 | r6.4 | r6.5.1 | r6.6 | r6.7 | r6.7.0 | r6.8.0 | r6.8.1 | r6.8.2 | r6.9.0 | r7.0 | r7.1 | r7.2 | r7.3 | r7.4 | r7.5

4 vendors · 23 products

References

38 links
Show all 38 references