SUSE-SU-2016:2505-1: libX11&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 12-10-2016Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2016:2505-1 is a vulnerability in libX11&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 12 · Downstream 0 · Related 12
CVE-2016-5407CVE-2016-7942CVE-2016-7944CVE-2016-7945CVE-2016-7946CVE-2016-7947

Timeline

  1. 12-10-2016
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for X Window System client libraries This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission level boundaries. libX11, libXfixes, libXi, libXrandr, libXrender, libXtst, libXv, libXvMC were fixed, specifically: libX11: - CVE-2016-7942: insufficient validation of data from the X server allowed out of boundary memory read (bsc#1002991) libXfixes: - CVE-2016-7944: insufficient validation of data from the X server can cause an integer overflow on 32 bit architectures (bsc#1002995) libXi: - CVE-2016-7945, CVE-2016-7946: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1002998) libXtst: - CVE-2016-7951, CVE-2016-7952: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1003012) libXv: - CVE-2016-5407: insufficient validation of data from the X server can cause out of boundary memory and memory corruption (bsc#1003017) libXvMC: - CVE-2016-7953: insufficient validation of data from the X server can cause a one byte buffer read underrun (bsc#1003023) libXrender: - CVE-2016-7949, CVE-2016-7950: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003002) libXrandr: - CVE-2016-7947, CVE-2016-7948: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003000)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse32 products
  • libX11&distro=SUSE Linux Enterprise Desktop 12 SP1< 1.6.2-6.2
  • libX11&distro=SUSE Linux Enterprise Server 12 SP1< 1.6.2-6.2
  • libX11&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 1.6.2-6.2
  • libX11&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 1.6.2-6.2
  • libXfixes&distro=SUSE Linux Enterprise Desktop 12 SP1< 5.0.1-5.2

1 vendor · 32 products

References

21 links
Show all 21 references