{"schemaVersion":3,"id":"MGASA-2018-0011","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated X11 client libraries packages fix security vulnerability\n\nThe XvQueryAdaptors and XvQueryEncodings functions in X.org libXv before\n1.0.11 allow remote X servers to trigger out-of-bounds memory access\noperations via vectors involving length specifications in received data\n(CVE-2016-5407).\n\nThe XGetImage function in X.org libX11 before 1.6.4 might allow remote X\nservers to gain privileges via vectors involving image type and geometry,\nwhich triggers out-of-bounds read operations (CVE-2016-7942).\n\nThe XListFonts function in X.org libX11 before 1.6.4 might allow remote X\nservers to gain privileges via vectors involving length fields, which\ntrigger out-of-bounds write operations (CVE-2016-7943).\n\nInteger overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might\nallow remote X servers to gain privileges via a length value of INT_MAX,\nwhich triggers the client to stop reading data and get out of sync\n(CVE-2016-7944).\n\nMultiple integer overflows in X.org libXi before 1.7.7 allow remote X\nservers to cause a denial of service (out-of-bounds memory access or\ninfinite loop) via vectors involving length fields (CVE-2016-7945).\n\nX.org libXi before 1.7.7 allows remote X servers to cause a denial of\nservice (infinite loop) via vectors involving length fields\n(CVE-2016-7946).\n\nMultiple integer overflows in X.org libXrandr before 1.5.1 allow remote X\nservers to trigger out-of-bounds write operations via a crafted response\n(CVE-2016-7947).\n\nX.org libXrandr before 1.5.1 allows remote X servers to trigger\nout-of-bounds write operations by leveraging mishandling of reply data\n(CVE-2016-7948).\n\nMultiple buffer overflows in the XvQueryAdaptors and XvQueryEncodings\nfunctions in X.org libXrender before 0.9.10 allow remote X servers to\ntrigger out-of-bounds write operations via vectors involving length fields\n(CVE-2016-7949).\n\nThe XRenderQueryFilters function in X.org libXrender before 0.9.10 allows\nremote X servers to trigger out-of-bounds write operations via vectors\ninvolving filter name lengths (CVE-2016-7950).\n\nMultiple integer overflows in X.org libXtst before 1.2.3 allow remote X\nservers to trigger out-of-bounds memory access operations by leveraging\nthe lack of range checks (CVE-2016-7951).\n\nX.org libXtst before 1.2.3 allows remote X servers to cause a denial of\nservice (infinite loop) via a reply in the XRecordStartOfData,\nXRecordEndOfData, or XRecordClientDied category without a client sequence\nand with attached data (CVE-2016-7952).\n\nBuffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to\nhave unspecified impact via an empty string (CVE-2016-7953).","dates":{"published":"2018-01-01T15:50:28.000Z","modified":"2026-04-16T06:25:22.394Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"libx11","name":"libx11","label":"libx11","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libx11","purlType":"rpm","versions":[{"text":"< 1.6.5-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.5-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxfixes","name":"libxfixes","label":"libxfixes","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxfixes","purlType":"rpm","versions":[{"text":"< 5.0.3-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.3-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxi","name":"libxi","label":"libxi","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxi","purlType":"rpm","versions":[{"text":"< 1.7.7-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.7-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxrandr","name":"libxrandr","label":"libxrandr","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxrandr","purlType":"rpm","versions":[{"text":"< 1.4.2-4.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-4.1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxrender","name":"libxrender","label":"libxrender","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxrender","purlType":"rpm","versions":[{"text":"< 0.9.10-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.10-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxtst","name":"libxtst","label":"libxtst","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxtst","purlType":"rpm","versions":[{"text":"< 1.2.3-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.3-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxv","name":"libxv","label":"libxv","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxv","purlType":"rpm","versions":[{"text":"< 1.0.11-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.11-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libxvmc","name":"libxvmc","label":"libxvmc","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libxvmc","purlType":"rpm","versions":[{"text":"< 1.0.10-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.10-1.mga5","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2018-0011.html","label":"advisories.mageia.org/MGASA-2018-0011.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19530","label":"bugs.mageia.org/show_bug.cgi?id=19530","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2016/10/04/4","label":"openwall.com/lists/oss-security/2016/10/04/4","hostname":"openwall.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-5407","CVE-2016-7942","CVE-2016-7943","CVE-2016-7944","CVE-2016-7945","CVE-2016-7946","CVE-2016-7947","CVE-2016-7948","CVE-2016-7949","CVE-2016-7950","CVE-2016-7951","CVE-2016-7952","CVE-2016-7953"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-01-01T15:50:28.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:25:22.394Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:26:14.878Z","stale":false,"partial":false}}