Out-of-bounds Write

Affecting libx11 package, versions <2:1.6.2-3+deb8u2

Overview

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.

References

• CONFIRM
• CONFIRM
• CVE Details
• Debian Security Announcement
• Debian Security Tracker
• Gentoo Security Advisory
• MLIST
• OSS security Advisory
• RHSA Security Advisory
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory