SUSE-SU-2018:3102-1: libX11&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:3102-1 is a vulnerability in libX11&distro=SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 11-10-2018
   PublishedVulnerability first disclosed.
2. 02-05-2025
   Last modifiedVulnerability information updated.

Description

Security update for libX11 and libxcb This update for libX11 and libxcb fixes the following issue: libX11: These security issues were fixed: - CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062). - CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068). - CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073). This non-security issue was fixed: - Make use of the new 64-bit sequence number API in XCB 1.11.1 to avoid the 32-bit sequence number wrap in libX11 (bsc#1094327). libxcb: - Expose 64-bit sequence number from XCB API so that Xlib and others can use it even on 32-bit environment. (bsc#1094327)

No weakness data has been published for this record.