Improper Input Validation

Affecting libx11 package, versions <2:1.6.2-3+deb8u2

Overview

An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).

References

• CONFIRM
• CONFIRM
• CVE Details
• Debian Security Announcement
• Debian Security Tracker
• Fedora Security Update
• Gentoo Security Advisory
• MLIST
• OSS security Advisory
• RHSA Security Advisory
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory